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Foilow-up requests to 5/17/2006 OIG Interview of FBI AGO 


1 . Effective dates of the two attachments to ECPA National Security Letters which 
list types of information that may be considered by a recipient to be “toll billing 
records.” The attachments were marked as Exhibits 2 (shorter version) & 3 
(longer version). 

2. Effective dates of the two attachments to ECPA National Security Letters which 
list types of information that may be considered by a recipient to be an “electronic 
communication transactional record.” The attachments were marked as Exhibits 
4 (shorter version) & 5 (longer version). 


3. 


OS0::< 

OOtA 

5. 


Your emails and OGC guidance on how to handle “over collections” from any 
type of NSL. 

Your emails to “all CDCs” during the period from 1/1/2003 to date in response to 
questions from the field regarding NSL issues or that you initiated to address ad 
hoc questions. 

Hard copies of the current model ECs and NSLs (as of March 9, 2006) and the 
guidance (as of March 1 5, 2006) posted on the FBI/OGC’s Intranet. A printout 
from the FBI’s Intranet was marked as Exhibit 6. (This request may already be in 
process.) 


6. Documents in your hard copy or electronic files relating to the CAU/ NSL issue 
we discussed, including emails; letters sent by CAU to telephone carriers 
requesting information to be followed by an NSL; documents referencing 
meetings with CAU and others concerning this issue; and the forms and 
attachments reflecting the resolution of the discussions with CAU, including the 
follow-up information you referenced . 

— . 7. The name and contact information of the Federal Reserve attorney with whom 

you communicated on the TFOS/ NSL issue we discussed. 

8. The name of the Section Chief at TFOS at the time of the TFOS / NSL issue. 


9. Emails you sent, received, or were copied on regarding the TFOS/ NSL issue. 

10. The FBI’s current request for any legislative changes to the NSL statutes, 
including the suggested revisions we discussed to EPCA and the “Buckley” law. 


We would be grateful if you would provide these documents to us with copies to the 
Inspection Division c/o Section Chief David Evans, Audit, Evaluation and Analysis 
Section by May 23. 2006 . 

NSL VIO-2699 _ 
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Investigative Tools for ' 
Intelligence Investigations 


National Security Law Branch 
Federal Bureau oflnvestigation 



National Security Letters 


*] i NSLs - administrative subpoenas that allow the 
FBI to obtain three t^>es of mforaiatkm: 

> phone and email conunuhtcatioin records from hslet^oc 
conqMmes and Internet service providers (E!e^^ 
ConuR. Privacy Act) (Ifi use 2709) (same iflfonnation 
as gathered in pen re^stex/TT except historic, not live) 

- financiaJ institution records (Right to Ftnaocinl Privacy 
Act)(12USC34J4{aX5KA)) 

- credit bureau info ' identity of fbandal instiiutiofls r 
where consumer maintains or maintains and account; and 
consumer idcti^ing infomutkm (iochides names 
asaociated with peraon, current/fonner addresses and 

J plaoMofenqiloyTEient) (Fair Credit Reporting Act) (15 


USL 10»lu(aJ,(b)) 




National Security Letters 



« Prior to Paoioc Act, epmv^ autteihty could be po lower 
than Di^ty Assistant Dvector, Patrick Act allowed 
dciegaticm down to the SACa. , < 

« Cuntotly, appiovB? authority has been delegated to 

• D^oiyDtretter 

a AatstM IhMcton is rad d) DAD» fat CIAT 

• Onmd Comul Dniay Oraeral CouoMf far Nctwol SecBity ' 

Affabi, rad SoDCff OouDd SoeortayAfitbi . ' 

■ AttUM Dbeopf iB Ctet<^ ad dl SACi fa HY, DjC. LA ‘ 

• Ail SAO fa vfatf fifad dlvkida 

; if- ActtegSACcannotaign NSIa'-; ’ 

,■ Udo notice SAC in fieUofBee» can EC lo NSLB y 

, V that we draft the ^ 


L_ 
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National Security Letters 


■ Prior to Patriot Act, Standard for getting NSL was that dto 
tsiget be tied to foreign power. 

■ Under Section 50S of die Patriot Act, leaser standard- 
<mly need the mfonnatipn to be ‘^kwant to an authorized 
investigation to^toct against intcrimtionaltenoriain or 
cIandestioeuUBUi|ettoeBotivitiesptovideddatBuchan.. 

. investigation ofa United States pemui is not cooducted ' ; 
solefy on the luub of activities piDtei^ed by the firat 
ameodmem of the Constitution of tbe United States.** 

■: PrtOT toOctober 31. 2002. could onfy get NSL kt PI; now : 

' can ^iim Plorj^ipyesti^ *: ■« v 

/■ Sultiect of NLS do^ opt need to be ta^'of invdt^ ' 

; as long as expected iafomiatipn is ralww to authorized 

''7' mvesUgation ■ /'b . ‘ 


! 


National Security Letters 


■ For all NSU,is&uing office must prepare two documents: 
(1) the NSL itself; and (2) an EC approving the NSL and 
documenting the prediction 

■ All NSLa must be addressed to die specific con^iany point 
of contact (many of which are listed on NSLB's website) 

■ All NSLs should identify the statutory authority for the 
request, the type of rec<wds requested, and provide 
identifying iofomuition to assist the con^ny in processing 
the request 

m All NSLs require a certification that the records sought are 
relevant to an authorized investigation to protect against 
international terrorism or clandestine intelhgence activities 
and that an inveuigattonof a USP U not conducted solely 
on the basis of Hist amendment rights. 





National Security Letters 



■ Alt NSLs should have a non-disclosuie warning 

■ All NSLs should say that the information should 
be pewonally delivered to the FBI, not mailed 

■ All NSLs must be personally served on or secure 
faxed to the company (even though they are not 
classified, the fact of a named target and a 
reference to an ff or intelligence investigation 
would imply that the target is Che subject of an 
National Security investigation, which fact is 
classified) 




NSL vi0r2zoi - 





National Security Letters 


■ Certain N$Uh«ve an attachment suggesting the type of 
information that the company may consider^ to lal] 
within the paramete&A£lhutUiuta^^u^xaiaiai6^^_ 

- ToU bittiiig tecords i 


Finandiil itconfa -T 


— 

National Security Letters 


m The cover EC serves four functions: 

- hdocumems the prexIicatjoR tor (he NSL by stating why (he 
infomatioii sought is relevant (o an investigation 

- Ii documents the approval oftheNSL by field supervisors 

- It contains informaiion needed to fulfill Congressional reporiing 
requirements for each type c^NSL 

- It transmits (be NSL to the roqocsttng squad or delivering field 
division for delivery 

■ For reporting purposes, the EC muse include case file 
luinib^, subjects USP status, type of NSL issued, and the 
number of phone nun^>ers. email addresses, account 
numbers or individual records being requested in the NSL 
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Full Credit Reports - Court Order 



m In addition to FCRA, 15 USC I68lufa)8ito <b) . . ^ 

iafonnatkin (fifuuuiial iftstihidoitt and eonaiu)^ 
ideoti^djig infonnattoD), uoder 15U$C1681ii(c). cangel 
fuUconsuniDrinpontoCIandCTcaacsbycxpaneCoim . 
• onto -b ; - . 7; ^ 

■ SectbflSQSofPatrtot Ac^ctmsgMstandaMfo FCRA 
Court Older for consumer report - elimina^ requirement 
that target is tied to femrign power (Bomechange as with 
\ renwci IQ NSU) and ci^iBa standard of relevance to an 
. tuithonzed iDvc&tigationto)mtectagauBtiittHte^ 

. clandestine intoUiBcnceac^tica provided that oa - 
. tovesd^dto&ofauSPunbtcoQoucffidaotolyoalltobaa^ 
bffirstamehdm^nghts. . w " /e 



; 



RPPA National Security Letters 


. m ReeeiK change in dK«taiuie greatly expands tbedeBaidon of 
“fniancial instdiirions'* upon wtuch we cad Krve NSlj under the 
RP1»A 

m Per 31 USC 33l2(aK2). (to iitf includes; Iwred banfc; cmmoerLial 
bank (r (tus( cotap^ pHvatebsnk^ ictsdhuodev; dtoftbBthutkn; 
brdka w<tel«rn9meitowhbdicSEC;isvMnMBbankarGr ; 
btvesttnent coitiptHT)^ (tqiency eudattac iitos, ledeenw cr oslw 
ef travckrs*cfeggto.cto6li».iDCn^craflft; operator of a aedgotnl'’- 

■ystwTir. ingirawey wwmKiy f** lf»an nr rrujwtjr ■ 

. tnrvda^ncy: lkiats«a«ndvofm«i0v.iBlegi^cflinpu^,pmora ' 
mvohvtd in real estate rirtonn and Mflwierta: US PoetilSaivice,:’ 
agency of US/stateAoc^ gcsr t car^nog eta ai^ (if fcMgefaig: came; /* < 
, any busiowaiinuljr to [he above hsu toy btamenwhoee cash. 
nmactionhBvehigbdqa^ofuacflibimtoartoiteal, iM 

Tegoiatmy maueta ' ; 
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Full Credit Report NSL - IT cases 


■ Patriot Actadded 16SlvtorcRAtoaadK>ri2eNSl:ato. . 
cditain full "*consumer report of a coitsumer and ill other 
other mformation in a consumer’s fUc** (not just identity of 
flnanciai institution or (^nsumer idemifyijig infbmutHm) 
in IT cases only 

P Full credit report to be im^vided to ’*a govenunebt agency 
ODthorized to conduct uivestig8ti(»» of. or inteliigCDce or 
txHiizterioieUi^nce activides or analysis retetod 
iot^itational tenorism when fnesented with a wrioeB 
certification by such govenunenl agency dtal such - 
btformatioo is necessary for the agency’s conduct of such 
tnvesugatton. acdviiy or analysts.** 


i 



j Full Credit Report NSL - IT cases 


■ Same basic approval authority as other NSLs. 
(Dmity Director, EAD for CT/ Cl; AD and all 
DADs for CT, Oeneial Cooosel, General 

Counsel fM National Security Af&irs, Senior. 
Counsel for National Security Affoiis, ADICs and 
SACs it) NY, D.C., LA, and aU SACs in other 
field offices) 

• Include iKHi-disckisuie provision 
a Consumer reports in oott-rr cases still require 
court Older 

« 
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Full Credit Report NSL - IT cases 


I As with other NSLs, subject of NSL does not have 
to be target of the investigation 
I Same mechanism as other NSLs - Cover EC and 
NSL itself 

Although no congressional repotting requirement 
- cover EC should still state the number of reports 
requested, in the event we are asked by Congress 
about the use of this NSL 


Dissemination of NSL Information 


Information obtained through the use of NSLs 
may be disseminated in accordance with general 
standards set forth in AG guidelines - i.e, the mles 
that apply to information sharing with DOJ, 
federal, slate and local authorities wherein share if 
infomiation relates to the responsibility of the 
entity 


Dissemination of NSL Information 


■ Per the AG guidelines, NSL information dissemination is 
also subject to specific statutory limitations fe. y. toll record 
NSL statute. ECPA, 18 USC 2701. and financial record 
NSL statut^ RFPA, 1 1 USC 3414, permit dissemination if 
per AG guidelines and infomiation is clearly relevant to 
responsibilities of recipient agency; credit report 1681u 
NSL statute, FCRA. 13 USC 168 Ju, permits 
dissemination to other federal agencies as may be 
necessary for the approval or conduct of a FCI 
investigation: no special statutory rules for dissemination 
of 15 I681v information) 


Payment for NSL I n formation 


a NSL for toll recoids/email accounts, ECPA, docs not 
provide for reimbursement of costs, although some ofHces 
do pay when requested in order to keep on good terms svith 
service providers 

■ NSLforfinancialrecords, RFPA, requires reimbursement 
of costs; Title I2.CRF Part 219, and appendix, provides 
reimbursement cost schedule 

■ NSL for financial institution information and consumer 
identifying informatioii, FCRA, section I681u, provides 
for payment but no schedule has been promulgated 

■ NSLfor foil credit reports, FCRA, section I681v docs not 
provide for reimbuisemeiit of costs 


FISA - Business Records 


I Under FISA, 50 USC 1861, FBI can apply to 
FISC far an ex parte order for business 
records (note: other sections of FISA wy that 
AG applies to Court far order) 

I When added to FISA in 1998, limited to 
business records from common caniets, - 
public ^ommodationsi vehicle rentals, 
storage facilities and standard was specific 
and Scalable facts that records related to 
agent of foreign power 


FISA - Business Records 
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FISA - Business Records 


I FISA peimits delegation down to level of ASAC ; ' 
I At cunent tune, appmv^ authority has been 


Director. EAD for CT/CI; AD and all DADs of 
CT, Cl, Cyber, General Counsel^ D^uty General 
Counsel for National Security Afbiis, ira 
Senior Counsel for National Security Affiuis) 
Business records foirn available for field to fill out 
and submit tfi headquarters and NSI£ (ally . 


FISA - Business Records 

I provision used once, before Patriot Act 
I SinM Patriot Act, requests have been made' 
to OIPR but OIPR hasn’t presented any to 

the Fisc < 

I Sighed nequest'that was approved by FBI 
and OIPR is now with the DAO's office 
I Thus, this provisron of the Patriot Act has 
nevCT been used 


FISA - Business Records 

I May or may not be able to get records 
covered by other statutes, such as tax 
returns or educational records -OIPR takes 
position that specific tax and educational 
records statut^ govern the procurement of 
those records 

I Library record requests will be subject to 
scrutiny 


Educational Records 


I Section S07 of the Patriot Act amended die Family 
Educational Rights and Privacy Act of 1974 (FERPA), 20 
use l232g (aka the "Buckle amendment")* u> provt^ 
for die AG to aubmit written application to coiut of 
cornpeteni jurisdictioo (OIPR says this does not include 
FISC) for ex order requiring educational mstituliQn to 
provide cducatioDal records "lel^aot to an authorized 
investigation or prosecution of [ceitain defined federal 
tenorism offensea] or an act of domestic or international 
terrorisni" 

I Must provide ccrtificatioD that there are soecific and 
articulable &cts giving reason to believe ihht the education 
records are likely to contain isfonnation relevant to such 
an investigation 


Educational Records 


Education records dehntd in FERPA as "those records, 
files, documents and other materials which (I) contain 
infomiation directly related to a student; and (2) are 
maintsioed by an ecucationaJ agracy or inatitutioD or by a 
person acting for such agency or institution." 

Educational institution is immune horn liability if it 
complies with court order 

Institutions are not st^Tposed to tdl targA of the reguest, 
since court order is ck parte, but no particular (mvision of 
statute provides for secrecy of die AG application - would 
need to include such pfoviston in the coun order 
General record keeping requirements of the school do not 
apply to the ex paite order 

Procedures for submitting a request for such an application 


Educational Records 


Patriot Act's amendment to Buckley was an expansion of 
Che availability of student records, which are ^nerally 
protected unc^20 USC 1232g, which ^lecificaUy sets 
forth who may be granted access to such records. 

Until this change in the E^triot Act, records were only 
available (and remaiii available) with the written consent 
of the student, a coun order, or a GJ or law enforcement 
subpoena (if by court order or subpoena, student must be 
notified in advance of compliance unless a court orders 
non-disclosure) 


NSLA/IO-2704 
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Educational Records 


[]■ 

• Stature perimts a 8chcM>l (bin doesn't require h) to release 
‘'directory infoimation'* (njune, address, (ekpkme, DOB^ 
field bfstudy, dates ofattcodance, delves awards 
received, t^rtiinpation in official activities and sports, etc.), 
without smdeni coQsrat or court order 
a Statute Inquires that stufenis te aflbided sin 
forbid release of direcutfy mfbrmatipn without dreh 
consent or court order *. : ' 

a Schools unliicely to release directory urfbnnfltioo, even . 
though pemuaed, without notiiying students : v 

ibb' '' -W'- 





j Educational Records 


■ Statute iq^ties to student acadeiuc rKOids so 

does not piotect recoids kept by cam^ law 
enfoeceineiit or recotds maintained by medical 
professionals affiliated with the school nor does it 
(Botectreconlsofeiiiployees,;. .. ^ 

■ FBI jxiliey. as stated from 19?( and 1996, is not to 
tequ^ or accept or use information hum sources ' 
or other enqrloyees at educatiop^ institutions 

jy- obtained ffiim student recoidSi,.: . , 
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Educational Records 

■ 

. 

, 


: ■ . ■ ■ V- '■ e’; ^ 


,m 



• • ' '..r • 
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Tax Records 


■ L[MrrA 710 !<SOKTA;ffAYER|OTyaN (NFOSAlA 
I . •c^WDKrtOMdK witartaca^fit^md^iBfonpttaRkcaatw 

fV>l/Fm j iiN urt m ff y >Hyjw< <pl ih* 

I ' ' p»»w— <»qa ■* anW, Bpfta fanta ih^ AH, gAft n> 

:•[■ ^-_.^tpttaiTw«iiyS««»y?''; 

I - T^evTBtfirrrTDt£sm6tr)Miiadt«itlftUiiit«aattfDrcn^_ 
i:.. h*OM*nt^MBT»<^t«>^a atil wnqfnTTy>^:' 

I' • ' TtoiHu aiiDifld CHR MU5C$l03fiX])l|A)^®)*McM«ovlDy«f« 

I . pftfttaecBdtt wdcr 

j - ths^ iftbcrt SfekateBBslaaEos tBjfoof cBS^odyeotMed teMa .. b ' / 

lb -' - 7 ' miiraHtfiiriDafov JOT pole cKmitom(r ,7o.b:7 


Tax Records - 

Taxpayer Return Information 

■ Intelligence case: 26 USC6l03{i)(7)(C)- provided for 
AG application to a federal dutrict couft for an cx parte 
court order to disclose taxpayer reuni information to 
federal intelligence or LE agency employees personally 
and directly engaged in any investigation response to. or 
analysis of intelligence and counterintelligence information 
conceming any terrorist incident, threat or activity. 

■ However. provi$ionexpiredDecember3l. 2003 and was 
never used and never renewed 

• Thus, at present time, no way to get taxpayer return 
informatioD in intelligence case if no cnminal nexus 



^ Tax Records - Return Info 

J Other Than Taxpayer Return 


■ UMITATIONS ON RETURN INFORMATION OTHER 
THAN TAXPAYER RETURN INFORMATION - lenn 
defined as information gathered during course of tax 
investigation that did not come Bom taxpayer 

■ Non-lax criminal case: 26 USC 630Ui)(2)(A), (B> - 
federal employees personally and diiecdy engaged io the 
proceeding can have access to retum infbnnAtion (other 
than taxpayer retuni information) upon written request 
from head of agency 



















Investigative Tools for 
Intelligence Investigations 





National Security Law Branch 
Federal Bureau of Investigation 



National Security Letters 


n ■ NSL^:Vadtmnistrative;sub(x^^ the 

FBI to obtain three types of infonn^on: , >> 

1 ^ phone and email communiution recotda from telephooe 

lb; ; companies and iniewt service providers tElectromc .-r ■ 
-Copim. Privacy Act).(l 8 USC 2709) (same infomtation 
. f /-’ as gather^ in pen register/TT except historic, not live) 
w fmancial institution records (Right (o Fiiiaocia) Privacy 
; Act).(12;USC Ml^a)<5)(A)).; 

_ V , ' credit bureau info - identity of hnancial instiwUonsb.-: ;.;- 
;V' where consumer maintains or maintains and account; and 
b Consume identifying information (bclw^ names 
. . ^sociated with person, curie nt/foriner addresses and ' 

J : • ’ p1ac«oferaplo>TOent) (Fair Credit Reportwg Act) ( 
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National Security Letters 


■ Prior to Pathol Act. standard for getting NSL was that the 
target be tied to foreign power. 

■ Under Section '505 of the Patriot Act, lesser standard >■' 

. . Only need the information to be '"relevant. lo an authorized 
: " investigabon to protect against inthrationa] terronsin or . ^ 

-L L; ctand^tine inteni^nce’ activities provided that such an ; 

- mvestigadon of a Uiuted States pehoniTs not conducted 
' . • solely on the basis of activilies protected by die first • ' l i 
•'.••ajnendinchtoFthe Constitution oftbcUriitcd States." ' 

Pnor to October 31, 2003. could only get NSL in PI: now 
• can get it in PI or- full investigation 

■ Subject of NLS does not need to be target of investi^tion, . 
... as long as expected information is relevant to authorized 

invesugation , 






National Security Letters 


, ■ Prior to Patriot Aci Bf^rovai authority could be no lower • , 

, than D^uiy Assistant Director; Patriot A«t allowed 
' ■ delegation down to the SACs. . , ; ' 

■ Currently, approval audiprily has been delected to ; - 

I)^yDifedoT;^^ '•}" '■-'•'l ' . 'b' • v 

• AncUaitt Directon.u etiaraei'iadiUDAIXt^^C^ ' 

■ OeboaliCowoel Dtpiiry 

atidSaubrCoiind tbrM ai; -l: : 

.. Aatrtflri pinODriii Cbarj^ bII 5ACsiBKY;DX^J.and LA. 

'"'•’is.''.'- • Ah SACi nqU^fidd diviaioB f I.'--"’ . 

■ Acting SAGcannoialgn NSLs. r, b 

■ tfdo not have SAC in field office, can 5^ to NS1.B 

requesting that we draft tiK NSL and send tt out . ■ 


1 




National Security Letters 



■ For all NSLs, issuing ofHce must prepare two documents: 
(1) the NSL itself; and (2) an EC approving the NSL and 
documenting the prediction 

• All NSLs must be addressed to the specific companv point 
of contact (many of which are listed on NSLB’s website) 

■ All NSl,a should identify the statutoi^ authority for the 
request, the type of records requestetf. and provide 
identifying information to assist the company in processing 
the request. 

■ All NSLs require a certification that the records sought are 
relevant to an authorized investigation to protect against 
imemalional terrorism or clandestine intelligence activities 
and that an investigation of a USP is not conducted solely 
on the basis of first amendment rights. 


_ 



i National Security Letters 


■ All NSLs should have a non-disciosuie warning 

■ AH NSLs should say that ihe infomiabon should 
be personally delivered to Ihe FBI, not mailed 

■ All NSLs must be personally served on or secure 
faxed to the company (even though they are not 
classified, the fact of a named target and a 
reference to an IT or intelligence investigation 
would imply thai the target is Ihe subject of an 
National Security investigation, which fact is 
classified) 


HEF^'IK I S FKC LA'S 3 1 FlEE 

DATE 07-12-2007 BY 65179 &HU/TAH/K3R/' JE 


NSL VIO-2708 
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National Security Letters 


■ Ceruin NSLs have an attachment suggesting (he tvpe of 
information that the company may considered to {all 
within the paramete rs of the statute. For example: 


F.naac.al reoorils ^1 ^ 



National Security Letters 


■ The co^’e^ EC serves four functions; 

It documents the predication for ihe MSL by staling why the 
infonnalion sought is relevant to an investigation 

- h documenB the approval of the NSL by field supen'isors 

- It contains information needed (o fulfill Congressional reponing 
requirements for each type of NSL 

- it transmits the NSL to the requesting squad or delivering field 
division for delivery 

■ Forraporting purposes, the EC must include case file 
number, subjects USP status, type of NSL issued, and the 
number of phone numbers, email addresses, account 
numbers or individual records being requested in the NSL 





RFPA National Security Letters 


' •v .Keceot change In tlw statute greatly^caparids the definition 

'''financial insliuiions" upon which we can serve KSU under the ' '' 

■•'RFPA 

• Per31 use S3I2(a)i(2), the listihchMies: insiff^banktconunecial. ' 

bank or trust company, private banker credit union; ihrifi infititunoA; ' 

. . ^ bibkcr or dealer registers with the SEC; investment banker or • ’ 

. '•' -invesQnentcompany;,currency exchari^; issuer, redeoner or cashier 
of travelog' checks, checks, money ordm; operator of a credit card 
^ system; imurtmceconipny, pawnbroker, loan or finance conquny, 

• travel agency; licensed serrder of money telegraph company; persons 
involved in real estate closing and settlements; llS Postal b^ice,, 

- agency of US/s(Kteflocal gov't carrying out any of forgoing; casino; 

. . any business aimilv to the above lisL any business whose cash 
- transactions have high decree of usenilni^ in oinilna]. (aa or . . ' 

'• regulatory matters . •frbi.'i 2 






Full Credit Reports - Court Order 



' ■' to FCRA; 15 OSC ,I681u(a) ami fb) 

V-. uifoinaation{fmahcia!jostiw^ - * ■. 

" td^tifying ipfonnatidQ), under 15 USC 1681u(c), can get 
• fiiU consumer report is Cl and CT cases by M parte Court 

c, ' ' ofder---%r/' r 

'll Section 505 of Patriot Act cfiiing^ standard for FCRA / ' 

' Court order for conaumer report - eliminated requirement ' 

; ; th^ larget |$ lied to foreign power (same change as with 

- ’ .respect to NS Ls) and croted standard of relevance to an 

- .'sutoorized investigation to protect Bgainslint'] terrorism or 
, clandestine intelliflence activities provided that an 

tavesiigaiion of a USP is not conducted solely on the basis . 

' -- of first amcfidmeptrighu.v*.-. . 7 






Full Credit Report NSL - IT cases 

• 

■ 

■ Patriot Act added 168(v to FCRA to authorize NSLs to - ; 
obtain full ‘‘consumer report of a comumer and all other, 
other information in a cotisumer’s Hle'’ (not iust identity of 
/financial mstitution or consumendentifymg information) b 
m IT cases only •> - v. • ^ 

. ■ -FidL credit report m be previded to Va'goveriuncnt agency :'.2 
t;: autbonzed:to conduct mvestigations of: or tHteiligeDceor v 
coumehntelligence acbvities or analysis related to, ^e^^ .s'’ 

uiternatiooal lemmsm when prt»enled with a wnnen^ 

-. certification by such government agency ihai such v f: 

. mfurmation is necessary for titc agcocy/s conduct of such/-’-: 
investigattoo, activity oi analysJS;’b ; r 


: 



Full Credit Report NSL - IT cases 


• Same basic approval authority as other NSLs ■ ■ 

i; (Dem^iPirector, HAD fpr.CT/ Cl; AD and all . 

— DAlfeforCT, General Counsel, D^iity General " 
. . Counsel for National Security; Affairs, Senior 
' Couhsei for National Security Affairs, ADICs and 
:SACs in NY, D.C., LA, and all SACs in other, 
field offices) 

/• •includes non-disclosure provisioti ; \ -s- 

"^• Consumer reports mnonrrf cases stiU require •v.if-' 
court Older 

" 1 ' 
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Full Credit Report NSL - IT cases 


■ As with other NSLs, subject of NSL does not have 
to be target of the investigation 

■ Same mechanism as other NSLs - Cover EC and 
NSL itself 

■ Although no congressional reporting requirement 
- cover EC should still state the number of reports 
requested, in the event we arc asked by Congress 
about the use of this NSL 





j Dissemination of NSL Information 


■ Information obtained through the use of NSLs 
may be disseminated in accordance with general 
sundaids set forth in AG guidelines - i.e, the rules 
that apply to information sharing with DOJ, 
federal, state and local authorities wherein share if 
information relates to the responsibility of the 
entity 


1 1 



Payment for NSL Information 


■ NSL for loll records/email accounts, ECPA, does not 
provide for reimbursement of cosw. although some offices 
do pay when requested in order to keep on good terms with 
service providers 

• NSL for financial records, RPPA, requires reimbursement 
ofeosts; Tide 12, CRF Pari 219. and appendix, provides 
reimbursement cost schedule 

a NSL for financial institution informaiion and consumer 
identifying infonnation, FCRA, section 168 1 u, provides 
for payment but no schedule has been promulgated 

• NSL for full credit reports, FCRA, section 1 68 1 v does not 
provide for reimbursement of costs 





j Dissemination of NSL Infonnation 


■ Per the AG guidelines, NSL infonnation dissemination is 
also subject to specific statutory limitations (^. toil record 
NSL statute, ECPA, 1 8 USC 2709. and financial record 
NSL statute. RFPA, 1 2 USC 3414, permit dissemination if 
per AQ guidelines and information is clearly relevant lo 
icspOTisibilities of recipient agency; credit report J 68 lu 
NSL statute. FCRA, 1 5 USC 1 68 1 u, permits 
dissemination lo other federal agencies as may be 
necessary for the approval or conduct of a FCl 
investigation; no special statutory rules for dissemination 
of 1 5 USC 1 68 1 V information) 





FISA - Business Records 

_ 


Ti Under FISA, 50 use, 1861, FBfcan apply to 
{•'FISC for an ex paft'e order for Business,, , '■ 

•V records.;(ndtd;jdtKef sd^^^ 
i AG applies to Court for order) , ^ ^ 

■ ,When added to FISA in 1998, limited to ■- ' ; , : 
, , business records from common earners, 

’ pubU,c accomm6datidns, vehicle rentals, 

’ storage facilities and standard was specific ■ 
and articulable facts that records related to 
- agent of foreign power ; : 






FISA - Business Records 


'■ l^tnot Act expanded universe oI Items Obtainable, to "any 
. ' things.fiocltidih^ records, papers, documents 

V'lad^bthci Items)" ^ ^ 

■:^K^i,AcYc}uing^.li^'g^^ infonhatido tdibib : 

.ob^ned is foreign intelligence infomutlon not cbbcer^g|8'i^ 
'“US perjon./or is feteyaiil to as on^ing invwtigation :io - 

; inicrnatiomliciTpmm.orcU ' Jj ' 

' mtelligencc gathenng activities" ^ investigation of USP' 

;■ cannot be based^solefy on activities protected by First - 

■{Saniesiandarti as establishcd by 'Patriot Act for PR/T.T: NSLs ■ 

■cz =1 
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FISA - Business Records 


■ Provision uSed once, before Patriot Act" • 

■ Since Patriot Act, requests haye been made ‘ 

■ to OIPR but OIPR hasn’t presented any to .. 

;.;-theFrse;- f,- 

■ Signed request that was approved by FBI ' 
and OIPR is now with the DAG’s office 

■ Thus, this provision of.the Patriot Act has ” : 
never been used " V. 





FISA - Business Records 


■ FISA permits delegation down to level of ASAC 

■ At cuitcnt time, approval authority has been 
delegated to headquarters ofHciali (Drouty 
Director; HAD for CT/Cl; AD and all DADs of 

! CT, C(, Cyber; General Counsel, Deputy General. 
Counsel for National Security Affairs, and 
Senior Counsel for National Security Affairs) 

■' Business records form available for field to fill out ' 






! 



FISA - Business Records 


• May or may not be able to get records 
covered by other statutes, such as tax 
returns or educational records -OIPR takes 
position that specific tax and educational 
records statutes govern the procurement of 
those records 

■ Library record requests will be subject to 
scrutiny 






Educational Records 


■ Seclion 507 of the Patrici Act amended ihe Family 

Educational Rights and Privacy Act of 1974 {FERPA}, 20 
use I232g(a^ the “Buckley amendmem”}, to provide 
for (he ACj to submit written application to court of 
oorr^tent jurisdiction (OIPR says (his does not include 
FISC) for ex pane order requiring educational institution to 
^Kovide educational records “relevant to an authorized 
invesiignitan or prosecution of [certain defined federal 
terrorism offenses) or on act of domestic or international 
terrorism'’ 

ft Must provide certification that (here are specific and 
articulable facts giving reason to believe that the education 
records are likely to contain informaticci relevant to such 
an investigation 






n 
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Educational Records 



^ 1 

■ Educaiion records defined in FERPA as “those records, 
files, documents and other materisls which ( 1 ) contain 
information directly related to a student; and (2) are 
maintained by an educational agency or insticuiion or by a 
person acting for such agency or institution,” 
ft Educational institution is immune from liability if it 
complies with court order 

ft Institutions are not supposed to tell target of the request, 

' since coun order is ex parte, but no particular provision of 
statute provides for secrecy of the AG application - would 
need (o include such provision in the court order 
ft General record keeping requirements of the school do not 
apply (0 the ex parte order 

ft Procedures for submitting a request for such an application 


_ 

. „ — - — 



Educational Records 


ft Patriot Act's atnendment to Buckley was an expansion of 
the availability ofstudent records, which are generally 
notocted under 20 USC 1 232g, which specifically sets 
forth who may be granted access to such records, 
ft Uniil this change in (he Patriot Act, records were only 
available (and remain available) with the written consent 
of the student, a court order, or a GJ of law enforcement 
subpoena (if by court order or subpoena, student must be 
notified in advance of compliance unless a court orders 
; non-disclosure) 

ft Thus, if have criminal nexus, can obtain such records 
tftrough subpoena and can obtain court order to prevent 
school from notifying student of dissemination of the 
records 
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Educational Records 


Educational Records 


■ StatMic permits a school (but doesr't require it) to release ' 
“directory information” {name, addr^^ telephone, DOB,-.: • 

.. ‘field of study, daces of attendance, degrees and awards ;- ; ?-. ' 

'' , received,’ participation in official adivilies and sporta. etc.} " 
without student consent dr court order , ' ^ 

■ Statute rtquires that swdenb be afforded ah opportunity to 
forbid release of directory informatiq^D without ^eir prior 

*conscui:Or court order'--- -./I- 

• Schools unlikely to release directory mformation, even : ^ 
though permitted, without notifying students ;v . 


■ Statute applies to student academic iwoids so , 
r does not protect records kept by campus law 
' enforcemerit or records maintained by medical 
^ p.rofessiojials affiliated wU school; nor does it 
.'.protect records 

. ■ IT3f policy, as staled from 1976 and 1996, is hot to 
", request or acC^ or use iiifonnation Wm ^ 

or other employees at educatioiial institutioos ' 
i j." obtained fkim shidcnt reepids 


_ 

Educational Records 



-I.;;;;;,: ■ s; “ -f 
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Tax Records 



'■ LtXOTAnONSpN TAXPAYm RETUWJ ^ 

• Tto adaUriMndios case 26 USCSlO^ltiKlMZ) .r IRS employee can get . ' 
•Mnio M reccnli wUkoiit i cDun ordv. au the infemutioa can be 
■ disKsiiruKed to DOJI^l nnployeea pcrconally tod direoly cagst^ in Ae - 
.r MOCMding, wnboui • oMBt onler, upon nqitcsi from the AG. DAGor Ase'l 
^AGtotheirwuiySecraa^ ' 

' ^ - That, even if rmriRS meoAff h» access 10 ufc reconU fiv Uk 

fdmiautntioniMLrpoea, be onool sharo ii wMi ofthcr mcmbai of JTTTF- ' 
Is , oiilcsS for lu auinittntioa puipostl. 

m Nce-tu crimniil case; 26USC 6N)3|j)(l)(A}.{a>' fedmt ctnployea 
; ' <ndndiBf IRS end DOJ}]> 0 ioaan)r anddJrealy engaged in the proceeding 
' cv> gH acess (0 taapajer return uncFnaatiaD via an or parte court order 
- (has. if itiae b a enniod nans in yt)ur cast; and youDctd taxpayer 
• V- lAujB mforeutioil, ]vu caaobtiui a tfarOu^ an ei paitecoun onUr 


! 1 


r 

Tax Records - 

J Taxpayer Return Information 


■ Inlelligence case: 26 DSC 61 Q3(i)(7HC) - provided fur 
AG application to a federal district court for an ex pane 
court order id disclose taxpayer return infonTiation to 
federal intelligence or LE agency employees personally 
and directly engaged in any investigation, response to, or 
analysis of intelligence and counterintelligence information 
concerning any leitorist incident, threat or activity. 

■ However, provision expired December 3 1 . 2003 and was 
never used and never renewed 

* Thus, at present time, no way to taxpayer return 
infortmiion in intelligence case if no criminal nexus 






Tax Records - Return Info 
J Other Than Taxpayer Return 


■ umitations on return information other 

THAN TAXPAYER RETURN INFORMATION - lerm 
defined as information gathered during course of tax 
investigation that did not come from taxpayer 

• Nofl‘tax criminal case; 26 USC 630 1 (0(2)(A), (B) - 
federal employees personally and directly engaged in the 
proceeding can have access to return informatiuti (other 
than taxpayer return information) upon written request 
from head of agency 
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Tax Records - Return Info 
Other Than Taxpayer Return 



■ Intelligence case; 26 USC 6l03Ci)(3)(C) provided thal we 

could get (and did get) from the IRS (tncfuduig the IRS rep 
on JT ITF) return mformation (other than tajipayer reium 
infonnation) “(hat may be related (o a lenorisi incident, 
threat or activity" - IRS needed permission to disclose 

from an IRS disclosure ofRcer, once penmssion received, 
information was disseminated to FBI, and IRS disclosure 
officer formally notined Director of the FBI of the 
disclosure 

■ However, (hat provision expired December 31 . 2003 and 
has not been renewed 


_ 




Tax Records - Return Info 
Other Than Taxpayer Return 


• Never used provision - 26 USC 6l03(iK7)(A) provided for formal 
written rtquesi by FBI Director or his deiegee to the IKS for disclosure 
of return information (other than caxpayci return mfoimationj to an 
emplo)-ee personeny and directly engaged in the response to or 
investigation of any terrorist incident, threat or activity 

■ Never used provision - 26 USC 6103fi)(7)(B) - provided fora formal 
written request by the head of an intelhgence agerx7 for the disclosure 
of return information (other than taxpayer re mm inlomtation] to any 
iTiieUigence ^cncy personnel who are personally artd directly engaged 
in the collection or analysis of inteltigence and counterintelligence 
irtformation nor investigation concerning any lerrorisi tncidertt. threat 
Or activity. 

• These provisions wot never used, expired December 31, 2003 and 
have not been renewed 




Tax Records - Return Info 
Other Than Taxpayer Return 



■ 11>us. in intelligence cases, we cannot get return 

^ information other than taxpayer return information, nor can 
. wc get taxpayer return informarion, unless case haa .. 
•cntninal nexus 

■ Per26 USC7213A, therearemtsdemeaaof criininal^- 
penalties that attach to unauthorized inspection Or ittum ; 
information - thus, need to be careful when accepting any 

- type of tax return infonnation 
• POC at IRS on disclosure matters and court orders- 










_ 




Tax Records - 
Use in Proceedings 


■ Per 26 use 6l03(iX4)cniiii6d “Use ofeettain disclosed returns and 
return iiiforniatiofl in judicial or administrEhve pfocepding'' - 
taxpayer mum infonnation and return infonnanon (dtber than 
taxpayer teium information) can be used in judicial or atbninistfativc 

proc«MingpeTtamin£loeiuort«meiaofas^iBcfedera]crTinina] 

; stamte or related Civil fbrfdbire' in whkh US or federal agency is h . ’ ' 
party -FtS A applicat ion doa not seem to be encompassed bm 

■ Per 36 USC 7213. tfiere are felony criminal penalties thal attach lO- . . 

unauthix'izeddtsciceure of return infomiation ' . . 7 ' 

■ Thus, it is recomntended that regardless of how you received return • . ' 
information,' it should not be tnchided m a FtSA af^bcatiem ■ ; b u 

7-’v , V --b 

- 5 .. .>*'V .-a }■ : v.,/.'.: 




7E 


Bank Secrecy Act Records 



] Information 


ITcnvatecomaaii' 


■ Has dutabasd 


J n nMTOM T 


■ prte kl ■ Uiy^r 

I I Can fa^arcpucsll 

• lcttefhca< ^ | ' 


No legal process required il inl'onnation is lo stay withih' •' 
the FBI ; , C 


b4 
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QUESTIONS? 
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,i ■ Investigative Tot)ls for'; 7' 
; ' Intelligence Investigations ", 


National Security Law Branch 


Federal Bureau oflnvestigation 



National Security Letters 


■) ■ NSI-sjt administrative subpoenas that allow the ■ : 

:: toobrain tljree typ^ of mfonnationii-.^^^^ ^ 

1 r *“>d email'^mibuiuMtiqn.reM^ 

*Comm.-Priv3cy'Act)'(18 use 2709)-(samc inforniaoon:j 

f as galiicned m pen reguter/lT except histone, not hve/ 

- '-L V. financial instituhon nxonLrCKight to Financial Privacy.., 

credit bureau info .2 identity of flnahcial initmitions . .. . . 
' ^ : : where coi^nmcr maintains or mamta.i^ an account; 

: .b'and eposumer identifyihg L^nnadonfj^liidevnAtn^Vi. 

;i |. associattd-withperson,cijncnt/fpriticr;^<lresse8and-;- 
’ places of employmern) (Fair Credit Reporting Act) ( 1 5 : ' 


USL, ioiJ(u(a), (b)J ^ 


p 

National Security Letters 

■ . Prior to Act, approval auttiority oewid be no Itmcr thu Deputy'^ .. 

: ; AMStant Patriot Act allowed deltcf^brido^ to Ae SA^:;.; 

i .;'Curr^yi ap^val authority, has bem delegated 

.' » DejWy tHraair 'b.V7b.-,---'\ .• :b, •’7;' '-b ;r-'- .-■ •'•■. • 

'bb' e iMiiaamrilTOon iacain^ii^aflllAOi.ferCVCri^ijte v ••' ''5bi.v.> 

l-t'.e Oea^ CimtteL DntuyOoartiCovuel'for'tokaalSecwhiyAmit^ 

' b- e ,btSooorCo«wt ftfMMiooal Searity.ATfti^ c,v.:.' 

piiriaof tfpaBrgfc lad ril ^C» « NY,'D.C^ 
i-'b'vb' A ^axC*iDottei deUdiywoM'bfbb.bbb.-^-" 

■..•'■■■A^iig'SACcatuwt L: 

1. IfdondthaveSAGiAfiddof^A^s^'^.'ibNSLBrrituasting' 

. dist.we draft tbcKSL and aend it out '^.r; '..; 


1 



National Security Letters 

• 

■ F^r to Patnot Act, Standard for geningNSL was that 
target be tied to foreign po^f. : ." • ' b ' 

• Under Section 505 of tbcFatriot Act, fess^ standard ‘ 

- ! oidy need the infonnation id te *’relevimt to an auAortied 
f investigation to protect against international terrofisrn of ; ' 

' clandestine iateliiMnce activities provided that such an 
. .- 'investigation of a unitod States person is;not conducted 
'} /' rsplely on the basis. of activides protected by the first, ;b 

• amendment of the Conadtutidh of tlte United States.'^ / 

-•« Frior.ib October 3 1, 2003. could only get NSL in hdl; now .v 
b can ^1 it in PI or lull investigation / . v- s: y - , 

^.a Subjoel of NSL does not need to be target of mvesuration, 

' '.{as long as expected informatioti is relevant to authonzed . ; 

; investigation r r ^ 


I 
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National Security Letters 



■ For all NSLs. issuing office must prepare two documents; 
(1) the NSL itself; and (2) an EC approving the NSL and 
dcKumenling the prediction 

a All NSLs must be addressed to the specific company point 
ofcontact (many of which are listed onNSLB's website) 

■ All NSLs should identify the statutotv authority for the 
request, the type of records requested, and provide 
identifying information to assist the company in processing 
the request. 

■ All NSLs require a certification that the records sought are 
relevant to an authorized investigation to protect against 
international lertonsm or clandestine intelligence activities 
and that an investigation of a USP is not conducted solely 
on the basis of firsl amendment rights. 






; National Security Letters 


■ All NSLs should have a non-disclosure warning 

■ All NSLs should say that the information should 
be peisonally delivered to the FBI, not mailed 

■ All NSLs must be personally served on or secure 
faxed to the company (even though they are not 
classified, the fact of a named target and a 
reference to an fT or intelligence investigation 
would imply that the target is the subject of an 
National Security investigation, which fact is 
classified) 



ALL IKFOPilATIOJI CDHTAIIED 
DATE 
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! National Security Letters 


• c 

in 

w 

rtab NSLs have an attachment suggesting the type of 
bi^tion that the company may considered to iall 
thin ihe Darameiers of the statute. For examole: 

Toll bilim? rccordsl 1 
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National Security Letters 


■ The cover EC serves four hinciions: 

- It documents the predication for the NSL by staling why the 
information s<Mjght is relevant to an investigation 

- It documents the approval of (he NSL by field supervisors 

- It contains information needed lo fulfill Congressional reporting 
requirements for each type of NSL 

- It nnsmits the NSL to the requesting squad or delivering field 
division for delivery 

■ For reporting purposes, the EC must include case file 
number, subjects U$P status, type of NSL issued, and the 
number of phone numbers, email addresses, account 
numbers or individual records being requested in ihc NSL 



1 




ECPA NLS 



•i ■ Wtde variety of infotmatiori that wc may obtain' ( 
. under.'Tbil.biilmg ^ords”. > ^ ^ 

■ Should contact ECAU in fbrmulatiQg NSL' < ^ 
lanBiiaop-- thrir wRhsifg as tn rhp POC : - ' ! ; 
http] {defauli.ht ' 


: Ji 

' ■ 

J%\ 





_ 

National Security Letters 


.41 Septsiher 2004 Ry-SP:f>sden]ci:iurtdecisi<>nholdihgthat NSL 
; . utuccs'sc unconstitutibna] bocautt (hoy do Rol'provtde fur a 

* .rchalIcngieby.therectpicrUoftlieNSLtotheNSLor.tolhenDn- ' ^ 

■ ;-,;,'d}Klckmpfovisto(i; and because the norwdiscIcsUrepnnasionts 
^v'fnaadauxy^without any certification or CKplait^Ofl m apanicular ease.-: 
iVv^' Ceon found aTtrsl Amcndnicm violadbii in the mandatoiy nature of < : ' ~ 

^ Ae non-discldfiure prcriasioii,'.aba«rice of procedune to ^lalle'nge it.' and 
LabseDOe ofeXccptiari for disclosure toattonteys fbr Legal advice, and to .. 

<';''>adidx:m entity to assist in producticn. (latter provi^on. is found ; 

'■;l^^\m'K»ncbotnptall'NSL siato:^^ ' ■" ■ '! 

{ . * ' Tlicre m now draft revisions in Congress (o rectify the pylons tiiat f/- 

• foiind - to provide for a challenge^by die. recipient tpNSL^ 

;. y^/^lsel^ l6 provide for a certifi^on by the that tbehoiMlUclosure •. 

. '. V p^wisKMi is necessary' in this particular case; to provide fgr a challet^' 
'.'i: .. ey.tberecipieRt of the NSLcothit odtification; and to provide for'. ' 
tnedw^forgovernm^tlo.enforaeNSL...^ 

' In nicantbnei there is a of tbe Court’s deosionuid we can 





RFPA National Security Letters 


' RecM dungeinthestautegreatly npands (hedeivmiM 

■ *6nancial institutions” upon which we canseiveNSLs under they^. 'L' 

■.'•'•'vRfpa;., ■- -.Vv.>. 

r « - Per. 31USC 53l2(aX2). the list ihdudes: insu^ baj^ oomm^aJ 
.-ii * hankdrtnst corr^any, privale banker, 'credit UAion;4hHft inatituKoh; ' ; 
:;>‘^^-tax>kaQr<lealerr^iscciMwiih(heSEC; iavetinenibankerar: > 

.tir* ’ inveRment ccenpany;, currency excharae; issuer, redeemer or cashier 
• ' of travelers' checks, checks, mon^ orders;.^ieruor of a credit card: . r 

irBurance cormiany; pawnbrolcer, loan or'finanofr ecn^ianyv..''-:-;.^ 
)^<'‘travel agency: lk«tseos«ndet.of money; telegivh company; paaons;^''' 
/.'-'v'.hivdfviM in real e^e d«iq» and setdemems: uS PcstaJ Novice,; ; ' .c 
'V -viigeocy of VS^$iai«/)ocal gov t canning out uy of forgoing; cas(no;v'^x' 
any business Similar to the above bst any business whose cash 
, ’ v.TvanuaiOQS have high degree of osenilotts m enmtnal, tax or:.: 
./rtiepUaoprmMtMS . , , ‘.‘>1 , 

"' 'i ^ ^ V a. ' ^ ^ 





j Full Credit Reports - Court Order 


Is-i In addition to FCRA, 15 use 16»lu(a) and <b) . ' 

V;v';informtibn:(fIhaivcial iastimrions and consumer 

USC 1681u{c).cangct 
full boasumert«p^il m.Cl.and CT cases by ex parte. Court 

^.•■\;>;bTdcr 

fi' S«:Uon^50'5.ofPatri6t'Actci^g^ standi^ FCRA . 

■ Jli Court order fOr.consum'CTfepori- climmated r^iiiremcm , ;; 
N.vi^that target is cied.to fot«ij^'TOwW'.‘(same chauge as 
f .--4V respect to MS La) aiid cre^M stand^ of lel^ an / 

autJK^nzed investigation ^ protect aj^inat int’lterrorismorv: 
^ claiMlesU&e mtelHKence^a^iviti^.provide(itbataii^ ^ /. • 

c ;^! bvcstigaUqnofa’USP is:DOt.<x»^uctcd soleiy pn.the] 
of fit^t'amendment rights, '.i ' ^ w. 
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Full Credit Report NSL - IT cases 


• Patriot Acl added 168 1 v to FCRA to authorize NSLs to 
obtain full '‘consumer report of a consumer and all other 
other information in a consumer's file" (not just ideniil)r of 
financial institution or consumer identifying infonnation) 
in IT cases only 

m Full credit report to bc provided 10 "a govemmem agency 
authorized to conduct investigations of or intelligence or 
counterimdligence activities or analysis related to, 
international terrorisin when presented with a written 
certification by such government agency that Such 
information is necessary for the agency's conduct of such 
investigation, activity or analysis." 


Full Credit Report NSL - IT cases 


■ Same basic approval authority as other NSLs 
(Deputy Director, HAD for CT/ Cl; AD and all 
DADs for CT, General Counsel, D^uty General 
Counsel for National Security Affairs, Senior 
Counsel for National Security Affairs, ADlCs and 
S ACs in NY, D.C., LA, and all S ACs in other 
field offices) 

■ Includes non-disclosure provision 

■ Consumer reports in non-IT cases still require 
court order 


b2 

b7E 
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I Full Credit Report NSL - IT cases 


■ As with other NSLs, subject of NSL does not have 
to be target of the investigation 

■ Same mechanism as other NSLs - Cover EC and 
NSLitself 

■ Although no congressional reporting requirement 
- cover EC should still state the number of reports 
requested, in the event we arc asked by Congress 
about the use of this NSL 





1 

Dissemination of NSL Information 


■ Information obtained through the use of NSLs 
may be dissemioated in accordance with general 
Standards set forth in AG guidelines - i.e, the rules 
that apply to information sharing with DOJ, 
federal, state and local authorities wherein share if 
infonnation relates to the responsibility of the 
entity 





Dissemination of NSL Infonnation 


guideliiM^^ mformatioa dis&emio^tipnur:' 

to sp^ific statutory limiiati^ record 

^,feNSL stotutc,EGPX, I8'USG2?0^, aiy record 

stttute, RFPA, 12 USC 3414(aK5)(B), permit 
rf per AG guideline and mformation 
.V^yj^clearly.nleyaDt to mponsibilities of recipient ' 

1681uNSLstamie, FGRA.'i USG 168lu,^-^ 
^rperratts dissemioation to other federal agencies as may be^ ' 
^^siv^necessarylbrtheapprovalorcoQduct'OfaFCL/',. 
^^iitvestlgation. no special statutory rules for disseroiDation > 
15.USC 168lv:fnformauon} s > * ^ ’ 


1 1 


1 

Payment for N SL Information 


r ■ NSL for (qH records‘'emBil accounts, ECPA, does not r > 
L"iii<l»ovide for raimbuiaement of costa; althoii^'^rae oflflcea"^,r.: 
'll : do pay when requested in'orderto keep oq good lenhs: with e 
V service provideisi 

NSL for fmaacUl rec<^; RITA, requires reimbursement 
of costs; Title l2iCFR Part 219/aad appendix; provides^.. 
feimbuncj^t oost'sc^ule^ ■ 

!■ NSL for financial mstiiution'infonmation and consumer h'' 
Idendfyisg mfbnnatkm,^FCRA; ^ 

> . for payment but no schedule has, been- promulgated 
■ NStTor full ciedit:nsporis;FCRA; sectton.l681v does • ' 

t provide for « ’ 

s . D-i.’'. Jit; , r-“ 

X- > ^ t 

J, ^ " h " s 
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FISA - Business Records 


FISA - Business Records 



Under FISA, 50 USC 1861, FBI can apply to, 
FISC fdrajiex parte orderforbusi^ 

: records (note: other sections of FISA, say that , 

AG applies, to Court for order)4l ’ ^ 

■ When added to FISA in 1998, limited to- 

business records from common carrietSi '"^ ' 

■ publiC'accOmmpdations, vehicle rentals, - 
storage facilities and standard was specific . - 

ifand articulable facts that records related to ; y; 
agent of foreign power 




o.Raoiot Act expanded uoiverse ot items 0Main8t>Je;.tb "any C 
t^iing 9 .(inc^di^ books/ rjxords, pai^rs, <^cu^dts 

s Patriot Act cb^^ legal staQd£hi: ‘'the 'infor£nati6^^ be , ' 
;Vobttii^'i$ foreign ouelligence Infonnationnot'^ncemiDg a< 

^ US'pefSon , -or is relevant to an ongoing mvestigauon . to:''- . 
v.;|»ote^ against ioter^tibnat terronsm or cUiulestme =v;' > ' 
v-^ intelKgenK gathering activities'' and lovestigatioii ofUSP ... 
>.caimoi-be bas^ solely; on-apbviocs,^ by kwst . 
•\AmendiiiCTi'^-f^-^/;;''^;,f 

■ Same staoda^ as established by Patnot Act for PR/TT; N$Ls 

■I I " 


b2 
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FISA - Business Records 


■ FISA permits delegation down to level of ASAC 

■ At current time, approval authority has been 
delegated to headquarters officials (Deputy 
Director; EAD for CT/Cl; AD and all DADs of 
CT, CJ, Cyber; General Counsel, Deputy General 
Counsel for National Security Affair?, and 
Senior Counsel for National Security Affairs) 

■ Business records fonn available for fieid to fill out 
and submit to headauarters and NSLB fattv 

1 1 





FISA - Business Records 


■ May or may not be able to get records covered by 
other statutes, such as tax returns or educational 
records -OIPR takes position that specific tax and 
educational records statutes govern the 
procurement of those records 

■ Library record requests will be subject to scrutiny 

■ Applications and FISC Orders are classified - 
need to go through special procedures for serving 
classified orders on uncleared person. 


1 



Educational Records 


• Section 507 of the Patriot Act amended the Family 
Educational Rights and Privacy Act of 1974 (FERPA), 20 
USC 1232g (aka the "Buckley amendmeni"), to provide 
for the AG to submit written application to court of 
cotr^teni Jurisdiction (OIPR says this does not include 
FISC) for ex parte order requiring educational institution to 
provide educational records “relevant to an authorized 
investigation or prosecution of [certain defined federal 
terrorism offenses) or an act of domestic or iniertialional 
terrorism" 

■ Musi provide certincaticn that there are specific and 
articulable facts giving reason to believe ^at the education 
records arc likely to contain information relevant to such 
an investigation 


1 



Educational Records 


■ Education records defined in FERPA as "those records, 
files, documents and other materials which (1) contain 
information directly related to a student; and (2) are 
maintained by an Mucaiional agency or institution or by a 
person acting for such agency or institution.'* 

1 Educational institution is immune from liability if it 
complies with court order 

■ Institutions are not supposed to tell target of the request, 
since court order is ex parte, but no particular provision of 
statute provides for secrecy of the AO application - would 
need to include such provision in the court order 

■ General record keeping Tcquirements of the school do not 
apply to the ex parte order 

J ■ Procedures for submitting a request for such an application 
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Educational Records 


■ Patnot Act’s ainendjnent (oBuckle/^sra ^pabsion of 
‘ ihc avail^ility ofsmdent rccordsv.wbicb are bncTally , . 

OToiectcd under 20 use I 232 g^ which specincally sets 
. . ; forth who may be granted access to such records 

■ Until this change in the Patriot Act. records were only. ’ 
available (and Teicain available) with the written consent / 

Of the studeot, a.court order, or a OJ of law chfofcemcntv:’:;- 

' ;>‘'v>ubpdcma (if by cqurt oider or subpoena, shi 4 <^ beV::;V> 

> noting ih advance of compliance unless a court orders 
\ non>disclosure) ' ^ 

'■. Thus, ifhave criminal neaus,:can obtain such records 
■/i '■ throu^ subpoena and can obtaoi court order to prevent . "(f// 
>' school Irom notiiying student of dissemmaDon of the :■< 

■VV'.- 'itWOldS v', : 






j Educational Records 

, 

'Sututeperriuci"a^sch6dl(&tdoesn't'tequueit)to r 

‘directory infprmadon’’ (name, address, telephone. DOB, . 
f' -ileid ofjtudy,. dates of attendance, degrees and awards ’'r'. . 
•^/v ,re«jycd, p^ct|wtioo m official and spo^, ep): 
;^l^’' Wilh^tshident consent or order c .r- v- - 

Statute requires that students be afforded an cf^rtumty^tb ; 
V; forbid rel^e of directory mformatiofi without their pnor< 
br.co^ ord^ 

^h^Iiuftiikily.io release directory 
'i('ihbugh penmtt^mtho iwiiiying.sm^^ 






Educational Records 


Statute applies to student academic recoids so 
does not protect records Icepl by campus law 
r., enforcementor recoids nimnlamed by medical ;; >. • 
professionals ajETdiated with the school: nor does it . 
protect i^fds of employees , . , u 

■ FBI policy^ias stated from 1976 and 19%. rs riot tOv; 
r. ' request or accept or use infonriatiori from sources '■ ' 
Or other employees at educational institutions .* ‘ 
obtained from student records : . 






■ Tax Records 


■ LIMITATIONS ON TAXPAYER RETURN [NFORMATION; 

• Tm sdsuDisiniiOb cssc: 26 DSC 6I03(hX 11,(2) ' IRS employees cbd ga 

access 10 tax records wdtMtut a fOiul order, atd the tnfbnDAlkin cut be 
duieraiOBSte to DO//FB1 employees pmonslly aod dimziy in ihe 

proceeding wilboul a COull order, upon request frcm ibe AG, uAo or Ass'l 
AG to (be Treasury Soaesary 

- Thus, even if ITTTF IRS motibo has Access to Ux recoids for Iaa 
adauRisiniioo puiposs. be cannot share it with other memben of JTTTF 
unless for tax Mmicusiration purposes. 

• Non-iu aimioal ease: 24USC6IO)(iHi)(AX(Bl - Mmleo^loyees 
(induduig IRS and DO/) pmonally and direetly ergsged in the pmceeding 
can JO Bceeasto taxpayer rctuin mfonnaioa via an «x paite court order 

- ibj$, if Ib0c is a cnmiiul nexus m your case. And you need (Axpayer 
jcrum information, you can obtain t( througb ad ex parte court oraer 

. 





Tax Records - 

J Taxpayer Return Information 


II Intelligence case: 26 U5C 6103(i)(7)(C) - provided for 
AG applicalion to a federal district court for an ex pane 
court order to disclose taxpayer return iAforrnation to 
federal intelligence or L£ agency employees personally 
and directly engaged in any investigation, response to, or 
analysis of intetUgence and counterinteUigence infornvation 
concerning any terrorist incident, threat or activity, 

■ However, provision expired December 3 1 , 2003 and was 
renewed in October, 2004 but it has never been used, 
i Thus, at present time, no way to get taxpayer return 
information in intelligence case if no criminal nexus 
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Tax Records - Return Info 
j Other Than Taxpayer Return 


■ LIMITATIONS ON RETURN INFORMATION OTHER 
THAN TAXPAYER RETURN INFORMATION - term 
defined as information gathered during course of tax 
investigation that did not come from taxpayer 

■ Non-tax criminal case: 26 USC 630 1 ti)(2)(A), (B) - 
federal employees personally and directly engaged in the 
proceeding can have access to return information (other 
than taxpayer return information) upon written request 
from head of agency 




Tax Records - Return Info 
Other Than Taxpayer Return 

■ IntelUgcncc case: 26 USC 6 l03(i)(3)(C} provided Uiat we 
could get (and did ^ei) from the IRS (inctitding the IRS rep 
on JllTF) rciuiTJ jnfonnaiion (other than taxpayer return 
information) 'That may be relat^ (o a terrorist incident, 
lltreat or activity" - IRS needed permission to disclose 
from an IRS disclosure cmcer, once permission received, 
information was disseminated to FBI, and IRS disclosure 
ofTiccr fonnally notified Director of the FBI of the 
disclosure 

■ Provision intended to be used upon IRS initiation but was 
actually used when FBI initiated request, and IRS agreed 
lo provide informaiioD (somewhat circumventing section 
6 1 Q3(i)(7)(A) - for FBI-initiated requests. See next slide) 

■ Provision expired December 31. 2003 and was renewed in 

— O ct obe r . 20 »<: 



Tax Records - Retimi Info 
Other Than Taxpayer Return 


. • ^ 26 use 6I02(iK7KMprgv>dc! fer^fbjttatwrttco itqucstbyfBl Difeoerw .*• 

. 'f . bis 10 ue IRS w dikiosure'of petum laionMiiDa rotbef ihad 

- rnirs iatonn^af to a c^loyeopcMDally Boddiredly ibthe ^ ^ 

' or mv^i^ioDof any tertwiA iaadoO^ or«atvity~ FBI in 0. 

pnK«jef<]dcflatiBatbo«nhDTSy$UGlit)i4ttb«FB]'GaDionnanyi^ei ■.’]'- 
request of the IRS brcudi infonnatiM. (IRS nqnst^ ^iele^ioa and ptefen r ' 

bpnrridciafonBKkniuidadiaprbvuuDnBhfftlifs6l03{i}(9)(C)iiiiBe - 
pfovisioa was imeodod briue whcatbeFBI Riitutfidtber^uest.)' 

' ■ .'26 USC 6103(iH7)(B) -providn (bra bnnilwrioen request by ibehsad of^ 
.aiiimtiligaice^eiicyibrtbedBcknureoframrainronnaikAletbefihu:.' 
•taxpayer Muni ipIbriDaiioa) to BDy ioieU^M sfeocypesoiutd wb6 ore 

- . psswaalty aaddirecsly.ehoBjfldiiitbe cometibD Of aauyaisof indlileQCe Bid - ' 

ooobffiBdhcesee iflfbniutiM Mr uwmiiattbo eoeetnitif afiy tmorin . 

. .•'•..^.ioddent, threat or acUyi ^; ^ 

■' TbaepToviswRs hove 0MbcfBQS^f9ipi^D«c«SD!peril,' 2002, buJ were' ' 

tc«wadfflOciob«f;2plM....-- - . ' ; ’ 

J;-'r -V^ 


^ ^ 


_ 

Tax Records - 
Use in Proceedings 


n '-■'’fi'r- - .vvsi-' 1'* 

■ .:^Pcr-26 USC.6103(iji(4)'«ithlfid*‘Use rehta and 

■■■ return infonhadon m judicial.tx'aibninutnHve prooeodrag’"^ 

V ; taxpayer return infei^tion arvJittimiijifax^OQlatha’thafl^.^^^ 
Uxpi>«rr«surhihfbTmahon)'c«sbeuaedih orodrmnis^ative-' c;> 

,.proceeding'potaiiungttedfbfcaQemofamed6c.^^ 

. statote'or.ieuted dvn’forfirituieir which, cc fedwal^ency ua'N^^^^ 
.^L'.'rparty.-_reA dotfc'not ceim.to be encoropossedbat 

Per 26:U^.7213v'd>erea]e'ie)oii)’ crinirnal perialtke bi^-tfiach 
unsuthorfe^ discioeureofreuhiiu^^ ~ " r/ 

« .Thus, 'hts iwomin^ed that rek^iess 
\iufonnaUbn;Kt should;QOtbeTnai^^ iniTI^A.iipplici^on 

iKftP ii 





J 

Tax Records - Return Info 
Other Than Taxpayer Return 


; * Thusi limited access ib' taxpayer "rstum inf^auqn 'ifnocnrnmaV ; 

".■■.'nexus''' V, ■ 

. Can gw taxposw' return mfomutionTMher dian taxpaynre^ 

. ' ' ruiUbnal £tcunty.-iesTOi'(smieiai«dcasc-but Jtot inpuieiiueUigenoe 
CMC - ’ '--yi 

• Per 26USC 7213A, Ihc^'aicmisdemcianor crurunoikcnallia (hat 
' . snach to unauth<xim inqxctkn or return informatioD - thus, need to ■ 

; hecwfiil when jicrmrine arw wfinri iftfanriarinn ; 

ru re S wit^closure matters oMcpiin ocd^j |' 


■ 





L 


r " •h'" ’ < » i ; 
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Investigative Tools for 
Intelligence Investigations 


National Security Law Branch 
Federal Bureau of Investigation 


National Security Letters 


ii NSLs - administzative subpoenas that allow the 
FBI to obtain three types of information: 

. phone and email cominuAicaricm records trom telephone 
GOnqMoies and inteniet service provkkra (Hectrmic 
Coatnu Privacy Act) (18 USC 2709) (same information 
as gathered in pen register/TT except historic, not live) 

- (uunctal institution records O^ight to Financial Privacy 
^)(l2USC34l4(aK5KA)) - 

- credit bureau infb - kfentity of ihiBneial iuadtutixms 
where oonsuioer maintains or xnainiained an Bcconid; 
and (X»isum» identifying iaformattoo (inchidea names 
associated with person, curreat/fomier addresses and 
places of enqiloyiBieot) (Fair Credit Rqxnti&g Act) (IS 

USC lb8Iu{a),lb)J 



National Security Letters 


■ Prior to PatnatAri,ipproi^ authority eould be no 

Assstaia Dneav; Patriol Act alkwed dekgatinn down to ds SACft. 
a CimcKa]y,a|9rpvaInfhari^httbcK|Bd^^iBdib ' 

■ . '• • Diqi^Dbabec^.; ' 

< -j' , • EtaeBriw.Antennrca«(E^.fi»CnCI' ' _/ 

■ AcdMBlIfeeeiflniBdw^aeijtGkUU ArCKT<Cytw. 'V:-rv t ■ 

■ ScbkrQM^'firlha^SMBniyiUain- .. ' 7 

‘ ' • MsttaDbeo<iruCtiD^«d«aSAAI»m,p.C,.adtA;':;;':i: ' 

M AB8M:ibaa0'Mdftvif)m'\'' ' ,b- V ^ 

''• ’Aafa^SACcimiotBigoN^.; '■" 

• Ifdo not have SAC in fitdd office, dttttod EC in NSLBKqucaong 
\ditt we dead tba NSL ftoid Mod it out 
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National Security Letters 


■ Prior to Patriot Ar^ standard for getting NSLv^diai the 

target be tied to foAMgD power. > v 

■ Under Section SOS of the Patriot Act lesser standard - \ ^ 

^ only need du ndbnziatton to be ‘^letevazit to ah authorized 

investigation to protect against ioienatl(»al terrorism or b, 
Pr chnwiestiiie nheuigez^ activities provided that su^ an 
‘ iiwestigatiooofaUutt^St^peritonbitotcoii^^ 
solely on tire basts of activities protected ly die fitat r /> > 
ameodnient of the ConstitiittoD of the UnitM 

■ Prmr to October 31i 2003, could only get NSL ih RtO; now 

cangesd raPlm’ ltilltiwestigatkm r . C ' • 

■ Subject of N$L does not need to be target of iovestigatioo, 

■ as long as expect inforiziatkm Urelei^ to . aothonzed 

J' invesh^tion ' ' 


1 ^ 1 



National Security Letters 


■ For all NSLs, issuing office roust prepare two dociUDCDts: 
(l)the NSL itself; a^(2) an EC approving the NSL and 
dc^menting the prediction 

■ All NSLs must be addressed to the specitic company point 
of contact (many of which are listed onNSLB's website) 

■ All NSLs should identify the statutoiy authority for the 
request, the t)pe of records requested, and provide 
tdentifying inronnation to assist the company (n processing 
the request 

■ All NSLs require a certification that the records sought are 
relevant to an authorized investigation to protect against 
international terrorism or clandestine intelligence activities 
and that an investigation of a USP is not conducted solely 
on the basis of fust amendment rights. 


1 1 



National Security Letters 


■ All N$La should have a non*diadosure warning 

• All NSLa should say that the information should be 
personally delivered to (he FBI, not maiied 

■ Per OG C midance, all NSLa roust be personally served on 
or secure med to the company (even mough they are not 
classified, the fact of a named target and a reference to an 
IT or intelligence iovestigation would imply that the target 
is the subject of an Natioiial Security investigation, which 
fact is classified) 

■ Delivery guidance has caused some problems and is under 
reconsideration by OGC 
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National Security Letters 
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Certain NSLs have an attachment suggesting the of 
information (hat the company may coiuidef^ to fall 
within the paramet ers of the statute. For example: 

- Ton billing foc^Ar I 


Fmanrialrecor^^^ 


Natioiial Security Letters 


The cover EC serves four functions: 

- It doonnerus the predicition Ibr the K$L by stating why the 

infonrutHon sought is relevant to an invesHgahon 

- It documen&dw approval oftheNSL by field supervisors 

- It contains inftnnstion needed to fulfill Congresskma] reporting 
requirernents ftr each type oFNSL 

- It transmits Ihc NSL to the requesting squad or delivering field 
division for delivery 

For reporting purposes, the EC must include case file 
number, subjects USP status, type of N$L issued, and the 
number of phone numbers, email addresses, account 
numbers or individual records being requested in the NSL 


National Security Letters 


■ Septonber 2004 NY SDftckfdcoufl dadskrahtddiis that 
1 ,“' atafartc* are unc oas tiu rtiogalbBcause th^ doabt previae a- • 

>'«' dianenget^tfiencipiaDtofihoNSLloflieNSLdrlotliendi^' 
dac1eemimMsioiuandbee8usettieeoiHlisehmnpcDvifitBi9 •: 
tnandaiovy whhdiaciy oRtificatioit oreapbasdoa (a apstlcular case. 

a f hiirMi ft ATTiynrin>^.nt i/i flJgfTflrfc in tlw iniiiitHl/irt f rtSiUfft of 

dw om*dtscknire prcvisioa. daoBeo ofpnMeduiiatodaUei^ it, arid 
of exocptioQ fix diictoaure toattonieja fix legal advKoji to/ 

othoa in entity needed to assist fa] pn)dDctkn(tetar pRwIaiMls found 
in soina but not all NSL sttUdas) 

m ThHB are aowr draft ra visios B in Coagrtts to taettfy the prahlaBa that 
-- theCdun found -to provide for a diallepgoby.tiiareeqnewt to NSL 
in^ to provide for a ccrdficalton tw fheW thatihenoe^dadeaunr^ ‘ 
% ' ■ PTOvtsion is r w ot aaa y in tins partiniW oh« to provide for achanengo .> 
^;;-by therecipietu<^ittoN5LtothMcemAGniDa;sBdt0pRrvidate ' 
'r;’ medianism fxgoveriiiaeiti toe^^ - ^ ^ 

Inizuaatime,iheretsaelayofibeCoint'adedaionaAdweean . . 


RFPA National Security Letters 


a* .Kaaeat towa g e iathestetotogieiiy cuptodr ihed rfHiti o i> of**fatapcM 
.jiiitatfeaKTceMvAitoiretiBaMryeK^ ' ' . r- : 

• Per3fUSC53I^)l?Ltoetist latoidM; igsaredb^' wwin e wiri 

' * PT ittg tlgift 


mw rtMititm tif twmi Uj imy 

oidca: apemre oadii oad lyetoD; inianace aMpoy; pawtonka; baa 

cgfiBwito uuuq i ety ttaydMcncy, BctogUl*endggf luuatj. tdemiiA 
OMiipasy; petem ototred m nw cBtae ctoeiais Bd MttleDarO; US Poetal 
Stfince,; egB^ of tlSfiSMc/k)^ fOv*t caity^ oBl asjr or&rafDmg; asioo; 

’ iBjrbiracasarilirtodwtooveDfa^bBiiaMvfaoaecatoEnBMtloas 

htg^ rtf 4a rtf 

i ' Lht "fiaeiM^ hsdMloBa" adieee n*T»»4t rrf rrjfrrt fd voder ItFPA / 


-fubleta to an NSL 


an oae may be aaaics dac <xud votaBsarvy PRMDce dtcB 
uadar toa KFFA aad if thv raflitoto do a^ «d they MO boi 
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Full Credit Reports - Court Order 


In addition to FCRA, 15 USC 168 Wa) and (b) / V . 

iftfe tmafOTn (finatyrinl iiwritntww| fttyj > 

tdeidifyulg i^Minaaoii), under 15 USC I681u{c), aaget 
fidl coDsiuner rep^ to Cl andCTcdsesby apaite Cotrt - > 
.-^Ofder. • • - V 

. Seetkm 505 of Patriot Act donged K a bd ard t^ FCRA 
Court order for consumer repoit - eliiunattd requiremeoti 
foat target is tied to foreign power (same change as with / 
respect to NSLa) and created standard of relevance to ao , 
authorized invesdga^n to proted agauM ioteriiattcm^ ’ : 
terrorism or clandestixie inteUigence activttiBs provided 
foat an investigation of a USP is not coodueteo solely on 
the basis of first aiaeadinent rigbfe. .* • ->. 


Full Credit Report NSL - IT cases 


Pairfot Aa added 1 68 1 V to FCI^ to «Ddiori 2 d N$Ia fo ; : 
tdMamfull'^coBsiiiiieTtepcMofaixmsuinerandaliiMher . 
otiicr infonnation in a cotovma's file** (not just idcntny of 
fuBActal imtitntion or consumer identifying infonnatiou) 

. :'a-rTcas« oafy // . v”'. 

Fi^ Crolh repi^ to he fmrnded m Ag govc^^ 
aothwized to conduct iovesti^OoM or udeOigence or . . ; 

counlerhiteUigeiiiX acuities or anafysis related to, 
uSematicmal ternniam when [xesented widi a written 
certtficatam by such governnMtot agency tiiat such 
inforioBdon b necessary for the agency’s conduo of such 
' invesdgatkMi, activity or anafysis.** , ^ . l 
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Full Credit Report NSL - IT cases 


■ Same basic approval authority as other NSLs 
(Deputy Director, ^D for CT/ Cl; AD and all 
DAus for CT, General Counsel, Deputy General 
Counsel for National Security Affairs, Senior 
Counsel for National Security Affairs, ADICs and 
SACs in NY, D.C., LA, and all SACs in other 
field offices) 

■ Includes non-disclosure provision 

■ Consumerreports in non-IT cases still requite 
court order 


■ As with otherNSLs, subject of NSL does not have 
to be target of the investigation 

■ Same mechanism as other NSLs - Cover EC and 
NSL itself 

■ Although no congressional reporting requirement 
- cover EC should still state the number of reports 
requested, in the event we are asked by Congress 
about the use of this NSL 

" 1 





Full Credit Report NSL - IT cases 


Dissemination of NSL Information 


Information obtained ihiDugh the use of NSLs 
may be disseminated in accordance with general 
standards set forth in AG guidelines - i.e, the rules 
that apply to information sharing with DOJ> 
federal, state and local authorities wherein share if 
infonuation relates to the responsibility of the 
entity 




Dissemination of NSL Information 


■ Per the AG guidelines. NSL information dissemination is 
also subject to specific statutoiy limitations (e, g. toll record 
NSL statute, ECPA. IS USC 2709. and fmaneial record 
NSL statute, RFPA, 12 USC 34l4(a)(5)p), pennit 
dissemination if per AG guidelines and mfonnation is 
clearly relevant to responsibilities of recipient agency; 
credit report 168 lu NSL statute, FCRA. 15 USC 1681u, 
permits diasemination to other federal agencies as may be 
necessary for the approval or conduct of a FCI 
iovestigatiofi; no special statutory rules for dissemmation 
of 15 USC I681viafonnation) 


Payment for NSL Information 


p NSL for loll recorda/email accowtts, ECPA, docs - 

provide for reirnbuisemem of shlu>iigb^^^ 

' do psy when requested m Older m lc4^ good tanns wifo 

• service providers / • • p 

P NSL fof finaocial records, RFPA, reqaires reiizibutsenieiit 
of cpsftVTitle 12, CFR Pitft 219, aod provides 

reimbursement co^X schedule 
p NSL for fimiK^iAl iDro'tutfoii mfiHsutiM and coQSuo^ 
ideQtifymg mformatioQ, FCRA, sectioQ 168 lu, provides 
for paym^ Imi no schedute has been promulgated 
p NSL for foO credit reports. FCRA,sectioflJ 68 Jv does 001 
provide for reimbursemrot of costs 


TiItJritter FISA, 50 USG 1861, FBI caii aH>ly to 
nSC fflf an ex parte order for business 
records (note: other sections of FISA that 
AQ applies to Court for order) 

■ When added to DSA in 1998, limited to ' ; 
business recoids from (toinmon carriers, 
ptdiHc accommodations, vehicle rentes; 
stmege facilities and standard was specific 
and articulable facts that records related to 
agent of foreign power V ' 




\ 


FISA ' Business Records 


-N5t^ie=27 













FISA - Business Records 


- ■ FISA peimits delegatioo down to level of AS AC 

■ At cunent time, approval authority has been 
delegtaed to faeadguattets ofBcials (Dmuty 
Dinctor; EAD fiiir CT/CI; AD and all UADs of 
CT, Cl, Cyber, Gismrai Counsel, Deputy General 
Cotmsel for National Seoirity Aflaiis, ^ 

Senior Counsd for National Security Affaiis); 

■ Business recdids form available for field to fill out ' 






FISA - Business Records 


i-m Patriot Act expanded uiuverae ot itetns oMaiaabifi, to "ar^ 
tanmlite things (including boc^ nocofds, papers, dcNmments 
and other hemsr 

■ PanicH Acichanged kgsl standard: **d)e informationto be: 
obtained is foreign inielligeitce information not (xinoqiung a 
US person ^ ia reliant to an ongoing investigatton to 
protert against intmutfional tcmyism . 

mCelUgeoce gatbenna activities" and investigation of USP > 

> V cannot be baaed sole^ on aedyktes proteciea by Fint ^ 

Amendment 

a Sahtt staodBJ^aaesh^lishedbyPiorbt AirtforPillTT;NSI^ 

-1 ^ 
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FISA - Business Records 


■ May or may not be able to get records covered by 
other statutes, such as tax returns or educational 
records -OIPR takes position that specific tax and 
oducational records statutes govern the 
procurement of those records 

■ Library record requests will be subject to scrutiny 

■ Applicatiorrs and FISC Orders are classified - 
need to go through special procedures for serving 
classifi^ ordets on uncleared person. 

• We have only obtained seven business record 
■i orders so tar, and provision surrsets this 


December, 2005 | 




Educational Records 



■ Section 507 of the Patriot Act amended the Family 
Educational Rights and Privacy Act of 1974 (FERPA), 20 
USC 1232g (ala the *"Bt^kley ament^enO, to provide 
for the AG to submit written application to court of 
conmetent jurisdictioo (OIPR says this does not include 
FISC) for ex parte order requiring educational institution to 
provide educational records “relevant to an authorized 
investigation or prosecution of [certain defined federal 
teiTorism offenses] or an act of domestic or international 
terrorism" 

■ Must provide certification that there are specific and 
articulable foots giving reason to believe that the education 
records are likely to contain information relevant to such 
an investigation 


L 




Educational Records 


■ Education records defined in FERPA as “those records, 
files, documents and other nuterials which H) contain 
mfomutioo diroctly related to a student; ana (2) are 
maintained by an educational agency or iostiuition or by a 
person acting for such agency or institution/' 

■ Educational instimtioii is immune from liability if it 
complies with court order 

■ Institutions are oot supposed to tell target of the request, 
since court order is ex parte, but no particular provision of 
statute provides for secrecy of the AG application - would 
need to include such provision in the court order 

■ General record keeping requirements of the school do not 
apply to the ex parte order 

■ Procedures for submitting a request for such an application 


Educational Records 


■ Patriot Act's ameadmenl to Buckley was an expansion of 
the availability of student records, which are Mneially 
protected und^ 20 USC 1232g, which specifically sets 
forth who may be granted access to such records. 

■ Until this change in the Patriot Act, records were only 
available (and remain available) with the written consent 
of the stu^nt, a court order, or a GJ or law enforcement 
subpoena (if by coun order or subpoena, student must be 
notified in advance of conqiliance unless a court orders 
non-disclosure) 

■ Thus, if have criminal nexus, can obtain such records 
through subpoena and can obtain court order to prevent 
school from notifying student of dissemination of the 
records 


tJSt VICF2726 
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Educational Records 


■ Statute penaits a acbool (but doesn’t retpiiie it) to release, 
’’direcu^ infoimation’* (name, address, telephoiae. DOB, 
field of sUidy. dates of attendance, degrees awards 
received, paiticipation in official activitjes and spoits. etc.) 
without student conaent or court OT^ 

m Statute requires Uiat studeota be afTorded an of^Kirtunity to 
foibid release of directoiy infonnstkm without their prior 
consent or court order 

■ Schools unlikely to release directory udbrmation, eveii 
though permitted, without notifying students 


Educational Records 



■ Statute ^Ues ^ student academic records so 
does not i^tect recoids kept by campus law 
rafoicement or records raamtamed by medical 
professionals afifitiated with the school; nor does it 

' protect lecoirls of employees 

■ FBI policy, as stated from 1976 and 1996, is not to 
request or accept or use infoi^tion fiom sources 
or other enqiloyees at educational institutions 
obtained student records 



Educational Records 
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Tax Records 


a UMITAT10NS ON TAXPAYER RETURN INFCHU4AT1GM: > 


i T« ■dpAtUttUiow axK 76 USC 6J<i3(h)( J - IRS gBpl oyec <aa fft 
iscm ta IB raoosk wUdW a eoBft onni, iDd te dttbnaUaB GB te ■ 
< i Mfiirfii a W f ifirwtty Ir rtrr 

ptP wa i Un t wMicBacowloate^iyoaraqaai aDatbeAfiPADorAa>*t. 
yi; . AOto^TVcsafpSwcelmr. '-.f.-! ■ 

- TI^B^ waiflTl^DtSipaihglBacoBWPtMiwiwfetbrtB ^' 1 ■ 

atwis— fcff arfi armarifta 

;« NoiHBcrinBBalcHR'SiUSCllKIHlXlKAX^-fUcnteiBptoyea - 
(tDBbdtQi (RS a9dOOJ)psiOAiByandlnctfy ttaated taithapfoCMdi^ 

OB ftt acocB la iBRayor Man nrofimtkiii via m a parte CMSC order ' 
llBi.ifthenisa«nBalQe9aib70wca»AesdyD«Me(liBiWrnr' ,V 
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Tax Records - 

Taxpayer Return Information 



■ Intelligence case: 26 USC 6l03(i)(7)(C>- provides for 
AG application to a federal district court for an ex parte 
court order to disclose laxpeyer return information to 
federal inielHgence or LE agency employees personally 
and direct^ engaged many investigation, response to, or 
analysis of intelligence and counterintelligence infotmation 
cooccreing soy terrorist incident threat or activity. 

• Provisione3reiredOecember31,2003;urasrenewedin 
October. 20(H: it has never been used but procedures are 
being draifod. 

■ However, at present time, no way to get taxpayer return 
information in intelligence case if no criminal nexus 


L 




' Tax Records - Return Info 

J Other Than Taxpayer Return 


■ LrMITATlONS ON RETURN INFORMATION OTHER 
THAN TAXPAYER RETURN INFORMATION - term 
detined as information gathered during course of tax 
investigation that did not come from taxpayer 

■ Non-tax criminal case; 26 USC 6301(i)(2)(A), (B)- 
federal employees personally and direedy engaged in the 
proceeding can have access to return iciformation (other 
than taxpayer return information) upon written request 

head of agency 


1 


TigL viQ-272r ^ 
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Tax Records - Return Info 
Other Than Taxpayer Return 


IRS rep on JTTTn return infbnjiatioD (other than 
taxpayer return inrormation) '‘that may be related to a 
terronst incident, ihieat or activiw" - IRS rep needed 
permission to disclose from an IRS disclosure officer, once 
permission received, information was disseimoated to FBI, 
and IRS disclosure officer formally notified Director of the 
FBI of the disclosure 

Provision intended to be used IRS initiation but was 
actually used when FBI initiated re<|uesu and IRS agreed 
to provide information (somewhat circumventiDg section 
6 103(i)(7)(A) - for FBI-initiated requests. See next slide) 
Provision cuiircd December 31, 2003, was renewed in 


Tax Records - Return Info 
Other Than Taxpayer Return 


26 use 610^iK7XA) provides for fonnal written request by FBI 
Director or his dele^ee to (he IRS for diMlosure of return innimution 
(other than taxpayer return inimnatioR) to an employee peisonal ly and 


<hreetly eogag^ in d>e ittpoia e to or invetisarion of any ten o ns t 
inddenf. or activity - FBI inproQessofdeI«ating that authority 
such that the FBI can focrnally make a request of Ux Du for such 
ittformanoa (DtS requested dek^adon and prefers to provide 
information undw dus provision rather than 6103 OKmC) since this 
provision was udended for use when the FBI initisi^ the request) 

This provision has not boon used, ecpired December 31 , 2003, was 
renewed in October, 2004, and will sunset December 3 1 , 2005. 

P<r IRS request. FBI is in the procew of delegating Ditecicr's 
audionty pursuant to 6103(iH7KA) sothal Hcan used as Ok method 
ofgettii^thti information Cm the IRS rather than 6103 (iX3KC) 


Tax Records - Return Info Other 
Than Taxpayer Return 

■ 26 use 6103(tX7XB) -pit>vkl(» for a fbnsal writM ' . : 'i 
rccpicst by tltt h^ of BD iDteUigeace Agtncy for die:" 

; dtwlo&ureofrctunimformatiim (other tfasD taxpayer 
^ infoTiaatioD) to any intelhgettce agency penonoei who are 
. pereooaUy and dliiectly etiigsged m dK cdlec^ 

. EoalyBiaofi^UigeDMaidcousUiniimUignieeMc^^ 

< nOTiiiv6stigBtk»cppc«n)sig,ai^tenQn8tiiKkIeitt,^t^^ 
oractivhy. .. ^ 

■; Thii }n>viaion has iiM boused, mqtired Deoanber 31, V'^ 
2003, was roiewad in;Qctober, 2(KM, axid wiU sumet r 

■' December 3 1, 2005-'--'':.‘ ' 


Tax Records - Return Info 
Other Than Taxpayer Return 

nexus' - ‘ ‘ ' ■ ' ' 

■ Cm gat taxp^^nftireiafiannatiQnodierttsn taxpayer letam in 
ladc^ seatrUy.-imuuui rettfed oaise- but aol in pure uBdligeoce 

* ■ , 26 use 72 1' fliiare ini wfanfeaoor czintiaal pmltMt that 
aaaA te niuutia i »hI in^twiritin of mum iaftamaiim . thus. Deed to 
'V ]- ^carcfiUwtiBna Kiqitni igagytipcoftaxTerorein to :! 
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National Security Letters 


1 ■ NSLs - administiativc subpocsias that aUow the 

FBI to obtaiii three types of iofonnatiGn; 

- phone and enuil communicadon records from telq^ne 
cotnpanics and uitemet service providers (Eectraiic 
Comm. Privacy Act) (1 S U5»C 2709) (same information 
as gathered in jpen regiata/TT except historic, sot Im) 

- hnaodal institutUHi records (Ri^it to FioaociaJ Privacy 
Act)(I2USC34l4(8K5XA)) . 

>• credit Imreait wifa — idemity of ffnunptol institutions ' 
what cdmuiwf inaintains or mainiaiaed an ai^ 
ftfirf consumer ideotifyuig infimnatioQ (includes names - 
associated with person, current/former addresMS and 
j pbcesofenpkoaneotKFairCreditRepoTtiDg Act)(l5 


USU I681u(aJ. tb»l | 
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National Security Letters 


1 • Prior to PatTtot Act, standard £» gettiiig NSL was diat the ^ 
.,^'';targd be tied to foreign . V' 

• Under Section 50S of^ Patriot Act, lesser stBndard> \ 

only i»ed the iofonnattoD to be **ridevait to an authorized > ' 
invesUgadon to^toa against inteniatioiud teiTDrism ; 

dandcstiae imdlijtoiiccacrivttiia'yovidcddMtt^s^ ; 

investigatioB of a united States pawn is not conducted ^ / . 

- solely on dm basis of activities protect the first 

ameodinent of tlw Constinition of the Unit^ Statss.** 

• IVkrr to October 3 !, 2003, could only get NSL in full; now. 
can get it m PI or hill inveatigatiQO v 

m. SuliQectofNSLdoesfiOtneed tobe.tBfgetpf mvestigBtkmi, ' 
as UDg as expected infoniutioD is rele^^ to authorized \ 
investigatjon 


1 1 



National Security Letters 

_ 


■ Pnor to PttrkiAiX^MiproN^aunurity could be t» lower than De|i^ v 
AssUtaia Dnec^, Pmtot Act aOmVed UclegadoB down to 

■ .Cwariy,^sB'^ria^tytm'bemddeg^ 

Popotynieeur. ■ ■ .I'- 

. . • Bi 9 iBttM»AiilsttDiDvwtcv(Eito)lbrCPa' 

. • AjsuuapBKUniodii^ifldUIlM^ 

SakrCviSi^ Sadutly AAfai ' ' r- 

• AnUtBBDbattftnCbs^iadUtaACii&KV. D.C.,ad^ . 

• ADSACftnatcrScIi] AviUou ' ' ' 

a Acdqg SAC canaot sign NSta. yL 

■ If do not Imre SAC ta grid office, can send EC 10 NSLB nqocsdng 
(M we dtah the NSL «fld send a out 






National Security Letters 


■ For all NSLs, issuing office must prepare two documents: 

( 1 ) the NSL itself: and (2) an EC approving the NSL and 
documenting the prediction 

■ All NS Ls must be addressed to the specific company point 
of contact (many of which are listed on NSLB’s webstte) 

■ AH NSLs should identify the statutory authority for the 
request, the type of records request^ and provide 
(dendfying information to assist the company in processing 
the request. 

■ All NSLs require a ccnificatioD that the records sought are 
relevant to an authorized investigation to potcci against 
international terrorisni or clandestine intelligence activities 
and that an investigation of a USP is not conducted solely 
on the basis of first amendment rights. 
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National Security Letters 


■ All NSLs should have a non-disclosure warning 

■ All NSLs should say that the mfonoatioD should 
be personally deliveted to the FBI, not mailed 

■ All NSLs must be personally served on or secure 
&}ted to the conqiany (even though they ate not 
classified, the tact of a named tail|et and a 
reference to an (T or intelligence investigation 
would imply that the target is the subject of an 
National Security investigahon, which fact is 
classified) 
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ALL irJFOPmxrOH COKTAIHED 
wrKXTif TS iTrarT.AsatrrFD 
Eiim:: E?>S:2-;2BC(X; EX;:6S;iXi;;:I)HK,^ 





National Security Letters 


■ o 

io 

Wl 

^in NSLs have an attachtneni suggesimg the ^e af 
brmatioD that the company may considerra to rail 
ihtn Daremeters of statute. For example: 

T on btUif^wof^ 1 
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National Security Letters 


• The cover EC serves four timcttODs: 

- [( documents (he predication for Che NSL by slating why (he 
infonnadon sought is relevani to an investi^ion 

- It documents tbe approval of the NSL by tieid supervisors 

- It coniains information needed to fulftti Cengrtasiona) leporting 
FequiKtnents for each type of NSL 

- It inusmits foe NSL to the requesting squad or detivering fieid 
divisitf) for delivery 

P For reportbg purposes, the EC must include case file 
numbv, sid^ects USP status, type of N$L issued, ai^ the 
number of phone numbers, email addresses, account 
numbers or individual records being requested in the NSL 






National Security Letters 


ECPANLS 


■ Septtmber20d4 NY SD&dflr«J court dscbkMholi^llutNSL''''' -I 

I chaJlengel^thertcTpicnloflheNSLIoibeKSLartoteRon' 

I . dlscfo$OTpf<ovuion;andbouo8edieQoa*disclcfuivprovi9iodi* 

iMadtfcvy widKJtU «ny otftjficotNR or mptanatioa in a paittcultf cate. . 

> C(iuit£[w^«FnttA2jjendnKrttvlritf>wiatb»aighdat^niiureof I 

.(h»n0fkliscIasunpForriri<^xtBnc8(<proccduneioctttIkqpDit,ind I 
I atsaaocofexqptkftfixdodosoigto it lotiiejsfa ICBtladvioe,M>dto 
I othm la otfky needed to anlsaip(oduetlan(lflBarproi'iskB to tend' 

I , insemetetiMel] NSLMtutcv) — ^ /| 
' • Tbere aioricw draft lovBtone in Ccosttn to rectify the pfo^kiaidut . I 
dteCourtftMnd-tOfMuvido&redieJIe^bytfaereeli^iQNSL .’<t| 
I IttdfitopcDVKie&raoerftficaftdBbvthe^IdntftMaorHlaclaMreV 
I • provBHB is necesury in this pnticiinrcaec to provide five disOeofe 
by dw tec^ieiitcf ttw NSLto dM ircstificatnii; and to pfovide f»\ - 

.fnedienismftr.ffcnitro^ ^ ^ 

Ib'ineandme> &cft i» a at^,of tbe Ct^^s dei^ea and we can n-'....- 4 
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Full Credit Reports - Court Order 


-■ luaddidonto f^RA, 15 use l&Sii^a) and (b) b 

'< mfermatvin (ftpaiyri*! 

'ufeadj^iogudonBotum), uodv 
' , I foil cftnspmetr pq^ in Cl and CT cas^;by ex psHe Cotm; (b 
orcter •••■b 

II Sectaon SOS Act ebangod Aaadard for FORA : 

; . Couit Older for coxBumeritpon-elimhiatedfequiremcm 
that target is Co foreign power (same change as widi ' 

. respect to NSLa) and created icaod^ of lelevasce to an 
amlKmzed mvestigadon to potBCt agjahurt tciToriam or 7 

dandestiiK iiftellinence aciivitios provided that an 
investigation of a USP is not conmj^ed solely on the basis v; 
of firaCaincndxnetit rights. 
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Full Credit Report NSL - IT cases 


Patriot Act added 168lv to FCRA to authorize NSLs to 
obtain full "consumer report of a consumer and all other 
other information in a consumer’s file" (not just identity of 
fmandal instimtion or consumer identifying information) 
in IT cases only 

Full credit report to be provided to "a government agency 
authorized to conduct investigations of or intelligence or 
counterintelligeDce activities or analysis related to, 
international terrorism when presented with a written 
certificatioo by such govenunent agency that such 
information is necessary for the agency's conduct of such 
investigation, activity or analysis." 


Full Credit Report NSL - IT cases 

■ Same basic approval authority as other NSLs 


(Drauty [>irector, EAD for CT/ Cl; AD and all 
DADs forCT, General Counsel, D^uw General 
Counsel for National Security Affairs, Senior 
Counsel for National Security Affairs, ADICs and 
SACs in NY, D.C., LA, and all SACs in other 
field offices) 

Includes non-disclosure provision 
Consumer reports in non-IT cases still require 
court order 


Full Credit Report NSL - IT cases 


Dissemination of NSL Information 


• As with other NSLs, subject of NSL does not have 
to be target of the investigation 

■ Same mechanism as other N$Ls - Cover EC and 
NSL itself 

■ Althou^ no congressiottal reporting requirement 
- cover EC should still state the number of reports 
requested, in the event we are asked by Congress 
about the use of this NSL 


Information obtained through the use of NSLs 
may be disseminated in accoidance with general 
standards set forth in AG guidelines - i.e, the rules 
that apply to information sharing with DOJ, 
federal, state and local authorities wherein share if 
information relates to the responsibili^ of the 
entity 


Dissemination of NSL Information 

■; Per (be AO guiddmes, NSL mfbriitatkm di^emmdioa u ' ‘ 
also subject lo specify statutorv ILintationfr (olVTCcowt : 

NSL sta&ite, EOPA, I S use 27D9, JDd fUuncisI teebrd ' 

- NSLstatmc,Rf?A»12USC34l4(aX5XB),p^ .Vn- ' 
disseimiation if per AC guidelines >ad utf&inttdOT 
clearly rdevstt to responsibilities of recitwet ageoc^« 
credit cepoh 168 lu NSL statute, FCRA, 1SUSC168IU, 
perodts d^miitation to other federal ageocies as may be 
. oeexssary for tire approval or conduct of a FCl 

mvesdg^n; no special statutory niles for dissemination 
of 15 use ]68lv iofonttadon) 


Payment for NSL Information 

■ NSL for foU riKonla/cniail accounts. A, do^ not 

^ provide for leimbursezDcnt of costa, aldsou^ some offices 
do ]My when requested m<»deT to keep 00 good ternu 'with 

• • servfoe pxovidere ^ 

■ NSL for fioaoe^ racotds, R^A, foquiita reinfottTKia^ 

• ofeosts; Title 12, CFR Pail 219, and ^tpendix, {rovides 
' reitnbwTtoineirtcosisc 

■ .NSL for fotaocial institution informatioo and coosumer 

idciitifymg infonnedoiL FCRA, sectxm 1681u, piovides 
for |»yment but no schedule hin been promul^tted • 

■ NSL for foli oedit reports, FCRA, section 1681 v does oot 
provide for leiiobuiaemeai of costs - / *■ 


-NSL VIG-273? 




FISA - Business Records 


' I Uader FISA, 50 USC 1861, FBI can a|^ly to 
FISC for an ex parte order for business 
records (note: o^er sections of FISA say that 
AG applies to Court for order) 

■ When added to FISA in 1998, limited to 
business records Irbm common cairios, 
public accommodations, vdiicle nmt^s, . 
storage facilities and stimdanl 
/ and articulable facts diat recoids related to . 
agent of foreign power < - ' : . ' 


FISA - Business Records 

' ~M mnot Act eApaaoed universe of ic«tns oMimabie, to "any 
tampbk things (including books, records, papers, documents 
andotherttemar 

■ Patmt Act changed fegaj sondaid: **tbe infonnatioa to be 
obtained is ctccUigence inftmnabon not conccniiog a 

USpci9oO;OrttrekmuutoanoQgotngtDve$tig^ioR to 
protect imamst inBraatioiMj ter ror m n ot cfandwtiDC 
tmelligence gathenng activities’* ai^ iovestisatioti of USP 
cattnot be biied sok^ on acthrities procectM ^ Ftin 
^ 

. Sa^ skia^ estaMkh^ by.Patriot Ag tbrPR/TT;-^^ 


b2 

b7E 


_ 

FISA - Business Records 


■ FISA permits delegation down to level of ASAC 

■ At cument time, approval authority has been 
delegated to he^uaitcrs officials (Daiuty 
Director, EAD for CT/Cl; AD and all DADs of 
CT, Cl, Cyber; General Counsel, Deputy General 
Counsel for National Security Affairs, am 
Senior Counsel for National Security AfTaira) 

■ Business recoids form available for field to fill out 

^ and submit tn hjartgiiarten: and NSLB (atty 


1 



FISA - Business Records 


■ May or may not be able to get records covered by 
other statutes, such as tax returns or educationai 
records -OIPR takes position that specific tax and 
educational records statutes govern the 
procurement of those records 

■ Library record requests will be subject to scrutiny 

■ AppUcafions and FISC Orders are classified — 
ne^ to go through special procedures for serving 
classified otders on uncleai^ person. 






r 

Educational Records 


1 

■ Section 507 of the Patriot Act amended the Family 
Educational R^hts and Privacy Act of 1974 (FE^A). 20 
use 1 232g (alu the “Buckley ameodmenr), to provide 
for (he AG to submit wntten application to court of 
comDetent jurisdictioD (OIPR says this does not include 
FISC) for ex parte order requiring educational imtimtiotk to 
provi^ educationai records “relevant to an authorised 
investigation or prosecution of [certain ckfmed federal 
terrorism oflfensesj or an act of domestic or mtemational 
terrorism” 

• Must provide c«itirication that there are specific and 
articulabic facts giving reason to believe oiat the education 
records are likely to contain information relevant to such 
an investigation 







Educational Records 



■ Education records defined in FERPA as “those records, 
files, documents and other materials whkh (1) contain 
information directly related to a student; and (2) are 
maintained by an educational agency or institution or by a 
person acting for such agency or institution.** 

■ Educational institution is immune from liability if it 
complies with court order 

■ Institutions are not supposed to tell tai^t of the request, 
since court order is ex pane, but no particular provision of 
staane providea for secrecy of the AG application - would 
need to include such provision in the court order 

■ General record keeping requirements oftbe school do not 
apply to the ex pute order 

■ Procedures for submitting a request for such an application 


_ 
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Intelligence caae: 26 USC 6l03(i)(7)(C) - provided for 
AG application to a federal district coun for an ex parte 
court order to disclose taxpayer return infonuation to 
federal iotelligence or LE agency employees personally 
and directly engaged iii any investigatioii, response to, or 
analysis of intelligence and counterintelligence information 
concemii^ any terrorist incident, threat or activity. 
However, provision expired December 3 1 . 2003 and was 
mewed in October, 2004 but it has never been used. 

Thus, at present time, no way to get taxpayer rctura 
ioformation in intelligence case if no criminal nexus 
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Tax Records - Return Info 
Other Than Taxpayer Return 


UMITATIONS ON RETURN INFORMATION OTHER 
THAN TAXPAYER RETURN INFORMATION - term 
defined a$ inforniation gathered during course of tax 
investigadon (hat did not come from taxpayer 

Non-tax criminal case: 26 USC 630 l{i)(2XA), (B) - 
federal employees personally and dir^y engaged in the 
proceeding can have access to return information (other 
than taxpayer return udbrmation) upon written request 
from hcM of agency 


Tax Records - Return Info 
Other Than Taxpayer Return 


Intelligence case: 26 LTSC 6l03(i)(3KC) provided that we 
co uld get (aod did get) from the IRS (including the IRS rep 
on JTTT^ return udonnation (other than taxpayer return 
infonnation) ‘‘that mm be relat^ to a terrorist incident, 
threat or activity^ - llo tw neeckd permission to disclose 
from an IRS disclosure ofiicer. once permission received, 
information was disseminated to I^l, and IRS disclosure 
officer formally notified Director of the FBI of the 
disclosure 

Provision intended to be used upon IRS initiation but was 
actually used when FBI initiated request, and IRS agr^ 
to provide infonnation (somewhat circumventing section 
6I03(I)(7)(A) - for rei*initiated requests. See next slide) 
Provision expired December 31, 2003 aod was renewed in 


Tax Records - Return Info 
Other Than Taxpayer Return 


Tax Records - Return Info 
Other Than Taxpayer Return 


■ ThB, limited sccBS to taxpaj^ictambifixm^lon if DO Crrohst; 
nexus 

■ Cmptiaxp8y«ttUnlnfbnBBtion<xtMrthOTt&xpaywntOTin ^ . 
nsdciBl security - laiuiiii iifriated case -twt not ID paeiDt^igeooe 

' 9** ■ “ , 

■ Per 26 use 72136, Clem (getDadanemtrcritnliatpenahte 
.. a ttchtgw ftrfhonzBdin^ecttonosTetw mwfiSin p u^^ ^ 

becateflij irtunaccgidaga^ (ypeoftaxrctoni 
matten and ccurt unten 

=-■ Asagenbalms^.cangsttaxpayWretBmlnllmnatunifnmgeuiag 

- ^ttfierndwOtS '• v.>. « ' 


Tax Records ~ 
Use in Proceedings 


• Par26USC 6l03<i)(4) emided''U«Qfoeftalo6iBdQaedrc(uiuaal 
returti Lrifixinaurmm^iralKradBunBlrHtivaiBecBedinf^ - ' 

' tajqiayti imsm mfonbadon sal ram inl(raAi(m(otlia' than 
. taxpeya return inhxmttion) can be used in jwheud or adnantstratlve 
pnMWding psminm to Bifcrccmcm of a spedKk fedcql 
stztutE or retatod civM forfriture in udveh US or federal is a 
party- FISA atyhcatiim dog nclacemm be eaccKiy a s B cd here , . 
■ Per 26 USC 72 1 3. there aie felony crimina] that attain to 

itnautborirfld discioeuie ofram inftrnuttion 
a Thus,' it ia ceoaotmended that regstdlcss of hw you received return 
. uibrnation, U should oot be inchided in a FISA arolicadon 


Bank Secrecy Act (BSA) Records 


' -.-I.'.- < n ; 



























Message 


Page 1 of 1 



(OGC) (FBI) 

From: 


(OGC) (FBI) 



O riginal Mpssaae 

Fro J 1 (OGC) (OGA) 

Sent: Thursday. November 03 2005 10:51 AM 

To;| I (OGC) (FBI) 

Subject: NSL powerpoint 



SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Please send me your latest NSL powerpoint so that I can put it in our electronic library. Thanks. 


b6 

b7C 

b2 


Assistant General Counsel 
National Securit y Law Branch 
(202 ) 324 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


Ali t : ; ItiraKHATldtJ ; ; COirmiHED 

: o:7;r-i2^20o:7: 6;si?Sf ; ^ ehhv'itsh/ksr^ je 


NSL^IO-2739 — r— -- - -- 


6/19/2006 






National Security Letters 
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National Security Law Branch 
Federal Bureau of Investigation 
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National Security Letters 


^ ■ NSLs - admipi^nuive subpoenas that allow the 
FBI to obtain three types of infoirra^ 

- Phone and email communiaiiirm recorrfa from telgrttonc 
companies and uiteniet service provideTS (Electiomc 
Comia Privacy Act) (18 use 2709) (same informatkm 
as aatherd in pea legister/TT except lasmnc, pot 
» Financial institution records (Right to Financial iVivacy 
Act)<l2USC34l4(aK5XA)) 

•• Ciedh bureau info - identity of ftoBneiai mstitatkuis 
where consuniez' maintaiiis or maintained an account; 
and consumer idemifying information (includes tumes 
associated wife pert on. cuirent/fwmer addresses and 
J places of eoiployiDent) (Fair Credit Rc|writii^ ^)(l^ 


U!iC lb!IIu(a),(b)) 


1 

National Security Letters 


■ Prior to Patriot Act. Standard for getting NSLimihsa the b 

targrt be tied to forei^ power. V. 

m Under Section 50S of the Patriot Act, lesser standard - 
only need the mformatfon to be ‘*relA«it to aoautfaoiired - 
investigation to protect ^insi imeiiiatioaud tenprism or 
clandestine iDreiiigenoe activiliin ppvidbd Uiat ^h an 
investigatfonofa united States perkm is not corehictBd '• 
sokiy on the basis ofactivities protected by the tint , 
amendment of the Constitution of the UffitM States.”^ 5'" <H 

■ PrforfoOctQberM,2003, cwUtmh'^NSLmhdl; «nrt 
" - can get it in PI fiill bwrsriggK^ ' i.x 

■ Subj^ofNSLdottimtDeedfobetargetofuivestigttua;. 

infonsaricin 

investigation' vV.- 




! 

National Security Letters 


■ Piix to PoErict Act. snmval autiutiQ* couU be no lowv than D«bw 
A ceistmt Dinetor, PaOwt Atf aUptved ddegalita) down to me SACil 

■ Curreetiy, 9 provat autiurtty h»s bcca.dekgsad to 

• • Deri^Dbttidri ' ■ 

■ aneh«AaWADInEtcr(HAD}te’mi"n'. - t '' 

• AntwiftDiRtfanadarjp.tintf PADtteCPCTlO)to^ 

• Otoai!Cannd.Dn«t)r<kBBSlC«Btd ftrKeieBiJ Seemly AlBu>anl, ' 

Sfptflrrwiwrt 1^”***? *m» 

• AMtett DMcr ttt Cawaa, ad «B SACi te HY. DC., nU LA : 

•'MSACftbddaSelddnaaB- ' •<, i, ‘C l.sA- '-lvb' 

«■ AettiV SAC euna dgai^La' '■ 

«Ifdd not hm SAC fa 6dd Office; can scad BCmNSIAfcqbesiiqg 
i \fli«.wodr»nihet'fflLBid'e«nda.oitf 

c ' 
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National Security Letters 


a All NSLd should have a noo-disckxurt wamiog 
a All NSLs should say thu the infcematiMt should be personally 

delivered to the FBI oi sent by e resukted delivoty service, not nuuled 
nor sou by nort'seeure &x 

a Par OCCsuidance, all NSLe must be personalty served on or sent by 
restricted ddivciy service, doc mailed or seta by notvsecure &x to the 
coiniuiiy (even though they are not class! fiod. the &ct of a named 
target and a reference to an IT or intelligence investigation would 
impty that the ter^ is the subiect of an National Seoiri^ 
inveeiigation. wlu^ iact is clasaified) 

1 All NSLs should have a reasonable rettm date 
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National Security Letters 


■ For all N$U.tssuu% office must pn^iare two documents: 
(1) the NSL itself; and (2) an EC approving the NSL and 
documenting the prediction 

• All NSLs must be addressed to the specific con^aiw point 
of contact (many of which are listed on NSLB-s website) 

■ All NSLs should identify the statutoiy authority for the 

request, the of records requested, and provide 

identifying iniormation to assist the company in processing 
the request 

• All NSLs require a certification that the records sou^t are 
relevant to an authorized investigation to protect against 
intematioiial tenorism or clandestine intelligence activities 
and that an investigation of a USP is not conducted solely 
on the basis of first amendment rights. 


■ 



NSt^IO^40 ^ 


DSCLASjIFIgB BY 65179 DHM/TAKyK 3 ?.ATB 
OM 07-.12-2OO7 
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National Security Letters 


■ Certain NSLs have on atiachineni suggesting the wpe of 
infonnation that the company may considerM to rau 
within the oaramete ra of the statute. Foresuimpte: 

- Toll billine reconis I 


- FiiancialrecadaJ | 



National Security Letters 


■ The cover EC serves four funettons: 

- h documents the piedicetion for the NSL by stating why the 
infennasion sought is relevant to an investigahon 

- Itdooirnents(he^i{rroval oftheNSL by HeUsuporvisorB 

- It contaim information rreeded to tulftllCortgrcsiiofuU reporting 
requirement ftir each type c(f NSL 

- It transmits the NSL to NSLB.CTDi'Cl/Cyber. and the requsting 
cquad or delivering field division for delivery if necessary 

■ For reportiog purposes, the EC must include case file 
numb^, subjects USP status, type of NSL issued, and the 
mrobcT of phone Dumbers. cioait addresses, account 
numbers or individual records being requested in the NSL 
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■ 

_ 

RFPA National Security Letters 


<-■0806^2403 cfae^eiaiteftMateiirash'e^tBdi ibode£Bkk)a<kr‘‘fli)AcW 

itatiMna'' (giOD wMcb we w MTvO CDdar ^ RFPA 

p Pv3l USC5M2{aX}XtbetUiBictBdei; ianiedbaBk;ooBHiwrodbiH><ff- 

' nghuredwkbtbe &EC; isveniDea hedger tia>eita 0 cenoenyv oamey 

rfMifVw, mntipy 

■ erdm; cpeiMOj ofe gerbteenleimem wQniHeoojygy; pawabietar; lorn 
> QrflDtBi»«o(ipiBy:n^V>icKiloeBdMBddoftBcnBr.id«i^^ 

.< tfgpwyspeieoMi^hfediatedeetMacioriay eodaadeiuaiia;TJsftgtaI 
Sornkia^eg8BbrtfUS«in|1o«aljciv.1ciinylag 

b^htgbdeyw4rf«efatn«iiaaimini^tworrpggUoryaietHia 

' letnaiBUBitad ID there airy be otiMB to ODOM TirfuBtinhpiwhice their 
; ■ ftBnctilramtDaatolfaauPA. Iftbeyra&wtodoM, tb^enbentbto <> 
tb'®XSL'.,'- '7 




. 

National Security Letters 


■ S«|Pmbw2C>l)4NY^toendcouildecatoholdradiiPN5L. " - 
ttatuterreuncoaUiaidaBalbecaceetoydotwtprDvSefera :. 
challaaget^ thetecipiaBcrf^toNSLtotfieNSLorttifltefiorv 7 . ' 

pwl*Wt- 

mandatary wilhoid any ctrtdkadcn or eapUmaUon in a pstottocaasL ". 
a Cotmfa^aFortAinendmettvicdittoin totniarfaciy naant of ' 
tonop-dteclosincpro>^kavitocaoeofptcoedBm te d>aflq^ ft.'and: - 
absence ofexoeptto fix dbdoesre to ettorbeyi fir lega>advKo,i^io' 
oibcn b) cmity imM CO assist to irodvcifan <l«M ^cbvvto ii tbubd 
id »eni« but Dot an N8L staaitcs) " 

« thin ec now tevoidiu to Ccogtcts to ncti^ tte 

, the Cotm toad - to {TWfite fir a ctwleqae by fe rectotoD to NSL ' 
haet^ to provide a cstiAcBtian by to FBI that the BOfHllsclDSure 
proitoto is iwcssery to to psittolto case; to provide fir a challenge 
’ byfteredptettoftoeNSLtoil«certrflcatioo;sadtppnwaefer/ 
j ' tnedianisin fir govcnunenl to enforae NSl^ 

J ■ baii6acrim^toesa5iayoftheCotzt‘sdecisioDaKlwec0 


1 




Full Credit Report NSL - IT cases 



■ Patriot Act added I681v to FCRA to auttomze NSLa to - 
. obtain ^] **coft3on}9 report ofa consumer and all other 

odito infonnation to a consumer's 61e’' (not just identic of 
Hrancia] toutouton or consumer identif^'ng itobnnatkm) 
to rr cases only 

■ Full credit report to be provided to *"a govemment agency 
Biitb(Mi 2 Ml to conduct tovestigatioas oC or inteUtgence cv 
coutoermtelligenoe activtoea or analysis related ( 0 , 

‘ iidazttlional tenoriam when presented wito a written 
cmtifictition by such govemmoit agency that such V ' 

tofonnation is occesaary for the agency’s conto^ of such 
iiwcstigatioa activity OT analysis.'’ . 




1 



1 

Full Credit Reports - Court Order 

j 


1 ■ In addition to FCRA, 15 VSC I681u(a> and (b) V’ b . J ? 
information institutions and consume’ 

ktontifytog i^ormatioo), under 15 USC I681u(c), can get - 
foil consumer report to Cl and CT cases ex parte Court 
order 

■ Sectioa5&5ofPatriot Act changed standard for FCRA 
Court order for consumer report - eliminated requirement 
that target is tied to foreign ^wer (same change as with 
respect to NSLa) and created standi^ of relevance to an 
autnorizfid investigation to protect agaimt intcnudional 
terrorism or clamlesttoe intelligence activities provided 
that an tovesrigalion of a USP a not conducted solely on 
to basb of first omendmem rights. 


1 


1- NSL VI0^41- - — 
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Full Credit Report NSL - IT cases 


■ As with other NSLs, subject of NSL does not have 
to be target of the investigation 

■ Same mechanism as other NSLs - Cover EC and 
NSL itself 

■ Although no congressional reporting requirement 
- cover EC should still state the number of reports 
requested, in the event we are asked by Congress 
about the use of this NSL 






Full Credit Report NSL - IT cases 



■ Same basic approval authority as other NSLs 
(Deputy Director, EAD for CTT/ Cl; AD and all 
D ADs for CT, General Courrsel, D^uty General 
Counsel for National Security Affairs, Senior 
Counsel for National Security Aflaits, ADICs and 
SACs in NY, D.C., LA, and all SACs in other 
field offices) 

■ Includes non-disclosure provision 

■ Consumer reports in non-FT cases still require 
court order 


■ 

_ 




Dissemination ofNSL Information 


■ Information obtained through the use of NSLs 
may be disseminated in accordance with general 
standards set forth in The AO’s Guidelines for 
FBI National Security Investigations and Foreign 
Intelligence Collection (NSIG) - i.e, the rules that 
apply to infonnation sharing with DOT, federal, 
state and local authorities wherein share if 
information relates to the responsibility of the 
entity 






Dissemination ofNSL Information 


■ PerthcNSJG, NSL information dis&emmadoD is also 
subject to specific statutory limitatioos fe.g. toll lecord 
NSL statute, ECPA, 18 USC 2709, and financial record 
NSL statute, RFPA, 12 USC 3414<a)<5KB), permit 
dissemination if the NSIG and inifonnation b clearly 
relevant to responsibilities of recipient a^ncy; credit 
report 168 lu NSL statute, FCRA, 15 USC 168iu, permits 
d^emination to other federal agencies as may be 
necessary for the approval or conduct of a FCI 
investigadon; no special statutory rules for dissemination 
of IS USC 16Slv informadon) 


1 



Payment for NSL Information 


■ NSL for coll iecor<^effiailaa:oufltB,ED’A, does not 
provicte for leimburaemmi of ooats. althoi^ soBtt offioea 
dopay wfaearetpiested iDovder.fo keepoagood tama with 
; service providera , 

■ NSL for fuiancialrecc4ds,Rin^A, requires reimKnwi^^ 

ofeo3ts;Titie l2.CFRPait2l9,aad8ppendoc,provides ' 
reirnburseniem cost schedule - ^ ‘ 

. NSL for ftnaacia! iiatitutim infiamatioa and ebns^^ 

- idend 5 ^ informatioD, h'CRA* soetka ibSlii, j^vides 
for payment but do sdiedule baa been promdgiMied 

■ NSL for foil credit repoits, FCRAj'secdpn 1681v does not : 
^vidc for leimbuisement of costs 


1 



QUESTIONS? 


(202) 324-3951 = . 

4 , \ 

■ Visit our RBI Intranet site at 

http:, 
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Date: 6/1 9/2006 119 Time: 1 :07:06 PM 
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Output From: 

FBINET 

HSPICIK IS OTCLASSP'IED 


-NSL ViO-2743 • 
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National Security Letters 


National Security Law Branch 
Federal Bureau of Investigation 




National Security Letters 



■ NSLs - administrative subpoenas that allow the 
FBI to three types of inibmiation: 

- PhiSiC and ermail coramunicalion records from lekphorw 
cooqwiieg 8od imcTDet service provUSors (Electnmic 
Comni. Privacy Act) (18 USC 2709) (same bfonmtknn 

' Bs gathered m pen itgistaHT except hidoric, not live) 

- Financial u^tutioD rocoids (Right to Finaocial Privacy ' 

r A«) (12 use 34U(aK5XA)) . . 

• - Credit bureau info - of ftsancial institfiU(»5 \ 

■>'' wbere cbnsumd’ mainttuos Of nai^ 

:mdoontumeridenti^^ lat^^ (inchideamnieb 

. associated widi perao^ current^ofmer addresses and . 
^'vpltte8ofetDpbytq^)CFas’Cr^^ < 


L 

USCTWlu (a), (b7) 



National Security Letters 

• 

1 ■ > Piiv to Patriot Act, approval siudidrity could be no lowcs D«p^ 
r . AastsaMDireebor. Petrioc Act aSowad delegdian down to v; 

a. CuTcndy; approridaufecrity has been detqyirt.to; 

V ' V ; n' |j^!^Dtoiiar- . ' b,,- 

• e.Bqioalie.AseitrO 

.. '• OaBdCwiMd.OM70a»wCoiMdarflei^SRiB3t7'Ariliimt^,.- 
' : ' ' ‘ ■ . . ' gislw CoBori fir latUHii C*- liy Aftki v- V' 

■ AsiiaaubtoeaoriAdiir|B.ad4l]SACateKY.n.C..«tillA- 
• AOSAi^toddBSdddivyM ,'7 

Acdag SAC caoDoteiga NSLs. < . . ■ 

.. a .lfdoaccbiVeSACiDfieklofficetGBDeeadECtoNSLBTCqneeilag ' 

. ' dntvndr^d»NSLKidaeMho^ '■ J 


1 




National Security Letters 


j 

staiidaidforgetting.KSL'WBa thstfke 
’ ttfgfitbetkdtoforei^ ^ ‘ . ,> 

: ■ rUmhr SectkMk SOS of dtt Patriot Act, ksser atandanl -’ri 
v" <«ly need the iDfinmation to be **relevam to an edhori^ ' 
u . .mvesdgattontoprofiect agaimtiniRiiational iemn^ " 

.. claitoesdoe, D^DiKtince activities provided that such an 
mvesti^tion of a United States pmoo is not cosseted ' 
soblyott tig basis of activities protected by the fifit . : 

aottndfflcm of the C^dtution of the UnitM States.* < 

■; Priof topetober 31, 2003, could oob^ gd NSL in full; acw 
V. b Gan ged it m PI or fiul investigation ' 

■ SufajeaofNSLdoes not need to be target of isvesti^boa, 

. as 1^ as npKted infoniiat^ is leteC^ to mititonzed 
investigatton '■ -fr: . 


L 




? National Security Letters 


■ Per OC C ^dmoe, all NSLj must be penonatly served 00 or sent by 
rcatriged ttlivery seivico, not inaikd or sent by non-seoire &tod to 
the company (even though they arc not the &ct of a oamti 

taisetand areftrcncc to an IT or ituelligaicc investigation would 
imply that the target is die subject of anNational SenirTty 
investigation, which feet is classified) 
o All NSLs should have a reasonable return date 


DEEi.^SiFpS;:p;;6il^9:ni)HH:/TM^K3R^^ 

ON 07-12-2007 


All NSl^ should have a notKltsclaBiire warning 
All NSLs should sav that the infbnnation should be penonally 
delivered to the FBI or sent by a nstricted delivery service, mailed 
nor sent by non-seoire &x 




National Security Letters 



B For all NSLs, issuing office must prepare two documents: 
(I) tte NSL itself; and (2) an EC apimving iheNSL and 
documenting the prediction 

m All NSLs must be addressed to the specific company point 
of contact (many of which arc listed on NSLB's wmite) 

■ Ail NSLs should identify the siatutoiy authority for the 
request, the l>pe of records requested, and provide 
(dentifyu^ imonnation to assist the company in processing 
the request 

■ All NSLs require a certification that the records sought are 
relevant to an authorized investigation to protect against 
international terrarism or clandestine intelligence activities 
and that an investigation of a USP is not conducted solely 
on the basis of fust amendment rights. 


L_ 



NSt: VIO-2744 
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National Security Letters 


■ The cover EC serves four functions; 

- Itdocumcmsthepredicatioa rortheNSLbyststinswhy the 
infcnnatiDn sought is relevant to an mvestigation 

- It documents the approval of the NSL by Reid supervisor 

- It contains infbmiation needed to fUtflll Congressional reponing 
roquiretncDiB breach type ofNSL 

- It traesmits die NSL to NSLB.CTD/Ctf'CybB’, and the requesting 
squad or ddivering Reid division for deliveo^ if necessary 

■ For reporting purposes, the £C must include case file 
numbCT. subjects USP status, type of NSL issued, and the 
Qumber of phone numbers, email addresses, account 
numbers or individual records being requested in the NSL 






National Security Letters 


■ C 

in 

ertain NSLs have an attacluneiit suggesting (he hrpe of 
tfonnation that the company may considered to all 
ithin the parameters of the sbmite. For enamnle; 
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RFPA National Security Letters 


'OdobvtOOS dtnge blbeftanle^QUly cipaodi tbedefiii]tioecif”foiaadtf 
j hatlwiatt* opoo vdmta wo M »ave 

. tegatgij iriti £> SEC^ iav fin nwt baAor or igy<ata)iait epngjanj;, uiwtbuy • 
^*****^1 *****». <**^. 

. . flidfia; apowiBi ofaiWhi uaiHaummHgagy pnwfcrolcp; lup 

.€DDniit)( pofoai ovoM mfou cstt duiap aod MDlenxattcTl^ 

Servucy: agca^ ofUS/ttMcno^'MV’t^vryug oU any of fbf^bg; flffiita; ' 
> . «BybaraMniRmlK(Dibeiboi«aqa&ybyKtaa*wtaMcariti7iiiMctM>fit 

bava ti^ d^rev of Brdbbw n criioiiBL Ik or ngobtory ‘ . 

■ Lin <d*ftaaadil waitetioia" ’wboae reconfa uv pnxwted mto R?I*A 
V ]«analint^iotbaratBM^«ttitialte<euuveIoattiilyimdii6eibA 
tbuBdil fenMK oodcrlfae SrPA nd if ibey ndoe ^do a tbqr <&be , " ^ 
^ V. rtjeaioaoNK.' '• '' • ' 






National Security Letters 


m Septanb^r 2004 KY SDfeda^caandtasiaahofiSiag'tSsat NSL 
gtabneaareuncoMlitutionatbflcaoaelheydoflapiiavwfara 
doBenge ^ (he redpTttt of the NSL to the NSL or to die oos' 

. discfosureprovisioiL and because dvnoi-disdaiaepro^^ « 

inaodatcfy widuin any ocftificakn (V explusUMD tn a patiodar CKe. > 

■ ' fiimd a Pfnrt vinltinn m ifc^ wuniliiWy nWmW nf 

dH ixm'HdBclQfiuie pfovtnao, abseaee of ptocMhffe to dkauei^ h, and ' ' 
absence of exception for dbdoauni to attonicyB for tcgal advice, and to 
odun in entity needed to aoirt in iBoductioa (totter pewakn is found V 
in scoM but ha 41 NSL natum) 

iiari^ to provide for a«f^catkntyt^fBlthgtt»wMi^ .J 

; jorovtriaa is necessary at Qnspanicauarcasi^ to provide for oclBlko 0 B ^, 
^ by dnrodpieatt^die NSL to duccitificat^ad to provide for. 

nwhsnisin for goveriuoent to enfoice NSL. 

« fomeundiD6.dicroBastsyoftfaeCauA'sdodsicni]4weGaa> 






■ 

Full Credit Report NSL - IT cases 


■ Patriot Act added 168 IvmFCRA bo audv^izcNsix CD' vj- 
/ ' obtami^l **C(msumer fi^on of a conaumer and all otiher 
. ^ other mfomiutioditt a consumer’s file"* (notjust identic of 
V - fiiiaacia] msUtmikui or oonoioer idemHbdag inA)rmation) 
;..m'iT cases only : v'' V’- 

' ^FbU credd reixin te.bd b govenunent agency 

authorized to coadKt inyestigaaoitt oC or imeUigeoce or 
' oountGsioielUgBnceaddyitiesOT 

intenwiiioQal tenm^ udten presesoted with a wnttra 
certificaboQ by such govenimegt agency that 
inibnnanoo is oeocssary for the agency’s contuci of such 
investigatioiL ftctivr^ aiuilysi^^ . 






• 

Full Credit Reports - Court Order 


■ InadditiotitoFCRA, IS CSC 1681u(a)imd0>) 
infbftnaiion {fhuuKial imtitutbos aiul coRsuoi^ 

• identifying cmormation), under 15 CSC 1681u(c). can gin 
fuS coosumer r^it in Cl aid CT cases by ex paite Comt . 
order 

■ Soctiod 505 of Patriot Act'changedateindard for FCRA : 
Couri oixleT forcoifiuiDer icpntr' duninstod requiremetu 

^ . datta^tiatM tofimtgnpower (same change as with / 

: icspbct to NSLi) aid cioated standard oTrel^^ ^ 

‘ auuKirized iztvest^tion to protect against mtcroDtional 
' tenorism or clamterioe inteUi^oce activities provided 
dtat an investigation of a LISP a not cmducicd solely on 
ebe basts of first amendment rights. 

J 
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NSLVIO-Z745 






Full Credit Report NSL - IT cases 



■ Same basic approval authority as other NSLs 
(Deputy Director, BAD for CT/ Cl; AD and all 
DADs for CT, General (^unsel, Depuh General 
Counsel for National Security Awaits, Senior 
Counsel for National Security Affairs, ADlCs and 
S ACs in NY, D.C., LA, and all SACs in other 
field offices) 

■ Includes non-disclosure provision 

■ Consumer reports in non-IT cases still require 
court order 


■ 





Full Credit Report NSL - IT cases 


■ As with other NSLs, subject of NSL does not have 
to be target of the inyestigation 

■ Same mechanism as other NSLs - Cover EC and 
NSL itself 

■ Although no congressional reporting requirement 
- cover EC should still state the number of reports 
requested, in the event we are asked by Congress 
about the use of this NSL 
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j Dissemination of NSL Information 


■ Per the NSIG, NSL infotmadon db&cniinadon also 
subject to specific slatutOTy limitations le.g. toll record 
NSL statute, ECPA, i 8 U$C 2709, and financiai record 
NSL statute. RFPA, 12 USC 1414(a)(5)(B), permit 
dissemioBtioo if per the NSIG and inlbrmatira is clearly 
relevant to responsibilities of recipient a^ocy: credit 
report 1681uNSL statute, FCRA^ ISUSC 1681u, penmis 
di^emination to other federal agencies as may be 
necessary for the approval or conduct of a FCI 
investigation; no special statutory rules for dissemination 
of 15 USC 16filv information) 






Dissemination of NSL Information 


■ Information obtained through the use of NSLs 
may be disseminated in accordance with general 
standards set forth in The AG’s Guidelines for 
FBI National Security Investigations and Foreign 
Intelligence Collection (NSIG) - i.e, the rules that 
apply to information sharing with DOJ, federal, 
state and local authorities wherein share if 
information relates to the responsibility of the 
entity 
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j Payment for NSL Information 


■ NSLfOTbUrecords/eihadaccouitt, E(^A,'d^ 

provide fKA* mtmbuiiemud of costs, some cfficcs;,. 

do pay when requested in order to keep oo good terns wdi' 
service providcre'-'', 

■ NSLfornnascuJrccotds/RFPA, requires rciinbuniemm 
of costs; Title 12, CFR Part 219. and q>pendu, provides 
reiinbursenieiit cost schedute 

■ NSL few financial institutKm mfonhation and oopsumer ' 
kfeotifymg information, FCR^ section 1681 u, provides 
for payinent but no schedule has been promulgated 

■ NSL for full credit reports, FCRA. section 1681v does not 
provide for fciird^urseiiient of costs 
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] QUESTIONS? 

iNSLB> (202) 324|I 
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aVisit our FBI Intranet site at 


http 


u 




MLVIOz274.6_;. 


b2 

b'7E 




Message 
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(OGC) (FBI) 

From: 


(OGC) (FBI) 
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Sent: Tuesday, November 23. 2004 11 :12 AM 

To: (FBI) 

Subject: NSLs 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Enclosed is the NSL PowerPoin t that I 
know if you have any questions. 


promised you yesterday. Slide 18 deals with NSL reimbursement. Let me 


SENSITIVE BUT UNCLASSIFIED 


lEKEXH IS U3CLA3SIF1ED 

PATE 07-I2-2007 EY 65179 DKH/TAH./KSR/TB 


- ;NSL VIO=2747 ■ 


6/5/2006 




- 


National Security Letters 



■ NSLs- administrative subpoenas that allow the 

FBI to obtain three types of infoimatioD: 

- phone Slid email communication records frorotelqidioDe 
companies and internet service piovidcm (Ekctronic 
Comm. Privacy Act) ( IS use 2709) (same infonnatkm 
as gatbeied in pen icgistor/TT except historic, not live) 

- ileaitoialiRstinitum records (Ri^ to Financial Privacy 
Act) (12 use 34l4(a)(SKA» 

- credit bureau info - identity of financial instimtions 
where consumer maintains or maintained an acemutt; 
and consumer identifyiag iotonsatioD (ioctodes na^ 
assoctaled with person, cuirent/fonneT addresses and 
places of en^loymenl) (Fair Credit Reporting Act) (IS 


L 

UbL ibSluia), (bj) 




Investigative Tools for 
Intelligence Investigations 

Nat 

Fedt 

1 1 

lonal Security Law Branch 
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National Security Letters 


■ Prior to Patriot Act ataodard for getting NSL was that the 
target be tied to lore power. - 

• Under Section 505 of die Patriot Act iesser standard - 
only Deed tbe infoimstion to be **relev8irt to ad authorized 
iovestig^n to protect aga^ tntenwttooal terrorism or 
dandesfine iateluget^ activities provided dot aich an 
iovrat^a^a of a Un^ed Sates penoo is not oonductod 
^solely on itebasaofac^i^ protected by Ae first ' 

. ameodnKitt of die Const^ition of the .U&Hra States.** ' • 

■ Prior to 31, 2003, could only gei NSL in full; now . 

can ^ it in PI or fiitl investigatido . . f" ^ ’ 

■ SufajeidofNSLdoesDotased tobetoigaofmvesti^saioci.' > 

aa long aa eacpected infamatioa b relevant to amh onie d^ \ 
iovestiga^n ^ . 


National Security Letters 


■ PmtoPWKKAa,approvd«uihorityc(aUdbenQtowa-thanE)cpa^ 
Aftbtsin Oin«(or, PMriol Aa allowed ddegstkfl eowa u dK SACs. 

■ CtfTsdyt^Vi^’valiatboritybBbeenddqiatadtO’ 

■ Dcodr Otactcr 

■ GHcatwAjAMnDawtcrffiAniftrCT/ci' 

• AtflaiB dbBO« ia aad ilt DiADt to CKTi^Cyta' 

• OcDB«lCagsfd.I)qiQryaaralC«BBditrMBi(BUSttattyAAIrt.ifld 
Scnia CoBod fer wm SwBay Atobi 

. . • AidMttlbeaactoCtegAa^.iQ.SAriiaKY.lXC;«oillA' 

M'AUSACfiaaSvBdidnUactt 

'■ AalagSACcaitDaCBigDNSLa. . - 

■ [fdonabiveSAC mfiddofS^canfioidfiCtoNSLBrequertiflg , 
"diawe^aftdieNSLandBCPditout ' ' 



National Security Letters 


■ All NSLs should have a non-disc losute warning 

■ All NSLs should say that the information should 
be personally delivered to the FBI, not mailed 

■ All NSLs must be personally served on or secure 

Ibxed to the company (even though they are not 
classified, the of a named target and a 

reference to an. IT or intelligence investigation 
would imply that the target is the subject of an 
National Security investigation, which fact is 
classified) 


! 



National Security Letters 


■ For all NSla. issuing office must prepare two documents: 
(1) the NSL itself; (2) an EC approving the NSL and 
documenting the prediction 

■ All NSLs must be addressed to the specific companv point 
of conact (many of which arc listed on NSLB’s weMile) 

■ All NSLs should identify the statutoiy authority for the 
request, the type of records requested!, and provide 
identifying inrormation to assist the company in processing 
the request 

■ All NSLs require a certification that the records sought arc 
relevant to an authorized investigatioo to protect against 
international lerTorism or clandestine intelJigence activities 
and Chat an investigation of a USP is not conducted solely 
on the basis of first amendment rights. 





ALL IWFOFMTION i.'Om'AIHEP 
DAM:;:o;7^i;2s2SSS;l 




■.:';;-.NSL^^iOr2Zfl8 V 
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National Security Letters 


• Sqr(anbcr2004NYSI>fi9d^cowtdwisbal»Miii^4tttNSLcv 
- satotn ire QoconsdnitionfilbecauMtfa^ do not provide Car a . 
d»nen^ t>y ih« recq>i«tt of the NSL to dia N$L or tA Oe nofr 
daclosiM provisiorr, and btciBse the iXMHUsdoaure provieiM e 

m*i»aa««wy fitlwrt «wy nr tn « pjirttcwlar raM 

■ CoMitfamd 8 FbitAincridmetK violation in the rniTidrtoiynaPai of 
the iKm~dtsck)8ure (uuvliiuu, atncncg (rf jaoaedare to ctaaUeiye it, and 
abaeoce of exception for disdaBure to 8tlona>8 for la^ adv£e, and to ', 
otfaen in ectity needed to aasisl in produotian (latter ptsvisioo b foond 
in some but oot an NSL statma) 

9 There are now dnfitevislons in Coitgms to rectify the probJens dial 
the Court found - to provide fiar a dtalbn» by die red;nacit to NSL 


MCtopnnidcfbraocttUKitioa^theFBldtitdtonoo-diKlciaure - 
provision b neceasary inthbpartiaiWcsa; toprovidefbr achalteage 
by the recipient of the NSL to that certi ficatun; and to provide fiir 
m ec tenism fbrgovernraenttoenfijroeNSL ’ : . O '" 

■ Inmeastime, therebaetByofttreCciirt’BdeduanBfldweatt- . 



RFPA National Security Letters 


■ iUcentefa^e in temwegrt^atpanib the definition 
'‘fioancta]iiBdtutioQs''upone1dchwecanaerveN5L8indcrtbe . 
RFPA 

■ P«r3l use 53l2(aX2)>d)e list inchx)es:ia80iedbaede; coBtmflrca^ 
bank or trust ooR^rmy: private baidur, obfd unioo; thrift intitution; 
holcff or dedar ttftbterM «vith the SEC; iavaaonatt btttktf dr. 


(ravdamney^ hooues sender of nraoer, tokgi^ cWpay , paam : 
nvdveoifiiaie8tatocIoei])ttatd£etueiDetta;US^mS^c^ ^ 
agency ofl^Statolnalgovlcarr^iflgCVt soy of fiauvaing; casiiK^ . 
any btkjncss czmilar to the above 1st: any business wtnae nsfa 
mnsaiaidos have high degree of usefulnw in cnminal, tax of < 
regulatory maners 


Full Credit Reports - Court Order 


■ Jxi additioa to FCR^ IS USC I6S lu(a) and (b) 
iaformation (finaiKul institutkms km consuRMr 
tdentifyiiig m&rmotioa). under 15 USC !681u(e). canget - 
fuU OD&sumer lepon id CI and CT cases ck parte Court 
order - 

• Sectioo 505 of Patriot Act changed atandard for FCRA 
Court onltf ^ cofuuiDK report - elunioBted requirement 
,, th^ target is tied to fmeign ^wer (same change as witb ' 

respect to NSLt) and cr^edstaiutani of rek^ance to 8D ’ ' 
aumorbral invesdgation to protect agaiitrt iirtM tem>Hain or 
clande^iDe inteUi|Mfice activities provided that as . 
irtvesdgatioD of a USP is not conoucted solely on the basis 
of first amendmeot rights. 
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Full Credit Report NSL - IT cases 


Patriot Act added ) 68 1 v to FCRA to autborize NSLs to 
obtain full "consumer report of a consumer and all other 
other infonnation in a consumer's file" (not just identity of 
fuiaiKial institution or consumer identifying information) 
in IT cases only 

Full credit report to be provided to "a govenunent agency 
authorized to conduct investigations of. or intelligence or 
counterintelligence activities or analysis related to. 
intcmationai terrorism when presented with a written 
ccRtftcation by such ^vemmem agency that such 
information is necessary for the agency's conduct of such 
investigation, activity or analysis." 


Full Credit Report NSL - IT cases 


Same basic approval autboriw as other NSLs 
(Deputy Director, EAD for Cli Cl; AD and all 


DADs for CT, General Counsel, D^uw General 
Counsel for National Security Affairs, Senior 
Counsel for National Security Affairs, ADICs and 
SACs in NY, D.C., LA, and ail SACs in other 
field offices) 

Includes non-disclosure provision 
Consumer reports in non-lT cases still require 
court order 


Full Credit Report NSL - IT cases 


As with other NSLs, subject of NSL does not have 
to be target of the investigation 
Same mechanism as other NSLs - Covet EC and 
NSL itself 

Although no congressional repotting requirement 
- cover EC should still state the number of rqwrts 
requested, in the event we arc asked by Congress 
about the use of this NSL 


Dissemination of NSL Information 


Information obtained thmugh the use of NSLs 
may be disseminated in accordance with general 
standards set forth in AG guidelines - i.e, the rules 
that apply to information sharing with DOJ, 
federal, state and local authorities wherein share if 
information relates to the responsibili^ of the 
entity 


Dissemination of NSL Information 


• Per the AO giudelioes, NSL diise^^ 

i also street to ^)ecHK stiiititt^ litmwtiottt io^l reccM. 
NSL statute, ECPA, 18 USC 2709. mi fioancial reoofd . ' 
NSL statute. RFPA, l2USCWl4{aX5)(B).painit^ 
diasenuoatioD if per AG guideliaea aod infornBtioo is 
. cleariy rekrvantto respofisHrilHusofrixipkittagei^, 
credit repoR 16$tuNSLstatute, FCRA, 15USC1681u, . 
peimits dUsexnination to other fedenU BgeiKies Bs may - 
oecessary for the approval or conduct of a FCI 
investig^n; do special siarutMy rules for dtsseminatioB 
of 15 USC I681v information) 


Payment for NSL Information 


« NSL for foil riKonda/emad account^ not V 

provide for reimboraeiaeiit of costs, alfoou^ Moe offices 
do pay when requesfod nil order fo keep oil good tains with 
service provtden 

■ NSL for ffnancial records, RiTA, requifos reimlHirsemem 
of costs; Tide 12, CFR Pot 219, and appendix, provide 
reimburacment cost schedule 

■ NSL for ffnancial imdtutxm mfonnatkm and consumer 
identifying uiformatkm, FCRA, section 168 lu, isovides 
forpayment but ifo schedufo has beat premulgattd 

m NSLfor foU credit reports, FCRA, section I681v does not 
provide for reimburacment of costa 
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FISA - Business Records 


li Under FISA, 50 USC 1861, FBI can apply to 
FISC for an ex parte order for business 
records (note; other sections of FISA say that 
AG applies to Court for ordra) 

■ When added to FISA in 1998, limited to 
business records from common carriers, . : ’ 
public accommodations, vehicle rmtals^' - 
storage facilities and standard was specific 
and articulable facts that records related to . s 
agent of foreign pbwer , . 


: 


FISA - Business Records 


-m Patriot Act expanded univene ot items obtainable, to "any 
tao^Ie things (inctuding books, reconb, pq>ers, docitmeiiis 
and other items)'' 

■ Patdot Act changed legal standard: infonostion (o be 

obtained is foreign iniellig^tce information not concerning a 
US person , or is relevant to an on^eng investigation to 
protect against inter national tenonam or clandestine 
aieHigroce gatherios activities’* and investigstioD of USP 

. caoDOt be b^ed solev on activities protects by Pint 

Amendmem 

■ Same standard as estiUiluhed bv Patriot Act for PR/TT; NSU 
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FISA - Business Records 


■ FISA pennits delegation down to level of AS AC 

■ At current time, approval authority has been 
delegated to headquarters officials (Deputy 
Ehreclor; HAD for CT/Cl; AD and all DADs of 
CT, Cl, Cyber; General Counsel, Deputy General 
Counsel for National Security Ai&iis, and 
Senior Counsel for National Security Affairs) 

■ Business records form available for field to fill out 
and submit to headquarters and NSLB (atty 
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FISA - Business Records 


■ May or may not be able to get records covered by 
other statutes, such as tax returns or educational 
records -OlFR takes position that specific tax and 
educational records statutes govern the 
pirxiurcment of those records 

■ Library record requests will be subject to scrutiny 

■ Applications and FISC Orders are classified - 
ne^ to go through special procedures for serving 
classiiied orders on uncleared person. 






Educational Records 


■ Section 507 of the Patrioi Act amended the FamiW 
Educational Rights and Privacy Act of 1974 (FERPA), 20 
USC 1232g (ala the “Buckley amendment”), to provide 
for the AG to submit writlen a^lication to court of 
con^ceni jurisdictiOD (OIPR says this does ool include 
FISC) for ea parte order requiring educational institution to 
provide educational records '"relevant to an authorized 
investigation or prosecution of tcertain defined federal 
terrorism offenses) or an act of domestic or international 
terrorism” 

■ Must provide certification that there are specific and 
articulable facts giving reason to believe that (he education 
records are likely to contain information relevant to such 
an investigation 







Educational Records 



■ Education records defiiied in FERPA as “those records, 
filea, documents and other materials which ( 1 ) contain 
information directly related to a student; and (2) are 
naaintamod by an educational agency or institution or by a 
person acting for such agency or institution.” 

■ Educational institution ts immune from liability if it 
complies with court order 

■ Institutions are not supposed to tell laiget of the reijucst, 
since court order is ea parte, but no particular provision of 
statute provides for secrecy of the AG application - would 
need to include such provision in the court order 

■ General record keeping lequirements of the school do not 
af^ly to the ex pane order 

■ Procedures for submitting a request for such an application 
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Educational Records 


Patriot Act's amendnwiit to Buckley was an expansira of 
the avaiU^iUfy of student Tncords> which we jencrally 
^tected und^ 20 USC 1232g, which t^teci^Uy sets 
tCMtfa who may be granted access to such records. 


Uodl this change in the PatrimAc^ records w^re only ’ 

available (and zemain available) with the written consent , 
of the student, 8 coun onfer, or a GJ or bw enforcemcm 

: sul^Mena (if court order or subpoetu, student must be 
notUied in advance of compliance unless a court orders 
Don-discbsitre) 

I Tlnu, if have crimh^imxua;cw obtain sudi records 
dirou^ aubpoeu and can obtain oourt order to preveitt 
schod from cutdyiag student of diasendnatimi of the 
records 


Educational Records 


Statute permits a school (but doesn’t require tt) to release 
. ’’diiectory infcMination’’ (name, address, tdepbcm, DOB,' 
field of study, dates of attendance, degrees ^ awmds - v. 

received, psitkiq>stioa in official activities ai^ sporia, ^.) 
wifiiout student consent or court order , 

Statute requires that students be affonbd u t^zportunity to . 
finbid lelraae of directory iofonnatson without their prior 
consent or court ofcIct . . > . 

Scbctob unlikely to releaBC directory infonnatioa. even 
tibough permittod, wrdiout potifyic^ shxbiits ^ ' 


Educational Records 


I Statute applies to student academic records so 
does not protect records kept campus law ' 
enforcement or records maintamed by medical 
professionals affiliated with the school; nor does it 
protect records of employees 
I. rai policy, as stated fiom 1976 arid 19 ^, is not to . 
request or accept m use inforination fiom sources 
. or qt^ etiqrloyees at educational iruidtutions : ■ 
obt^ed fiom student records ' ’ ' 


Educational Records 


Tax Records 


■ LIMITATIONS ON TAXPAYER RETURN INFORMATION; 

■ Tax adniotstraioa case 26 USC 6l03<bKiX(2) • IRS ei n ptoyeq aa fd 
access U tax reconls vritbout a emut order, aad the in&rniBiiDii aa ba 
dmtttusaifld to OOJ/FBI employeea pentMally aad dbeoly atfaged ui the 
proc8cdiB|L WTtiuMt a cean esder, apaa raiiicn from like A(X DAG di Aii’t 
AC to tbeTreasory Swmary 

- Ttans. «vea if j 1 1 1 f DtS mcBdicr has access to tai recoids fisrtM 
admicis&HtioD purposes, be auuot iborc il wdb otbv amnbos of HTlt 
iiwiaiif^ ^ Igs administration putposcs. 

• Nod^ aioiaaf case; 26USC6l03(tXl^A), (B) > foIcnJaqibyea 
(mdudinf IRS end OOJ) penonalfy and directly ensaged ia the proceeding 
can get access to taxpayer rauro iojfomaiiOQ via so ex pane ooiin order 
• thus, iftbere b aenraina] nenuin/eur case, and you need taxpaw 
reiuni uifonnMioa. you can otaaio it doougb an n pane oour onJo' 


Tax Records - 

Taxpayer Return Information 


I Intellige^ case: 26 USC6103(i)(7XC)-f»t>vided for 
AG application to a federal district couit for an ex pane 
court order to disclose taxpayer return information to 
federal intelligence or LE agency employees personally 
and directly engaged in any investigatioii, response to. or 
analysis of intelligence and counterintelligence infonnation 
coucenung any terrorist incideat, threat or activity. 

I However, provision expired December 31, 2003 and was 
never used and never renewed 
I Thus, at present time, no way to get taxpayer return 
inforniadon in intelligence case if no criminal nexus 
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Tax Records - Return Info 
Other Than Taxpayer Return 


LIMITATIONS ON RETURN INFORMATION OTHER 
THAN TAXPAYER RETURN INFORMATION - tenii 
defined as iiUbnnation gathered during course of tax 
investigation that did not come from taxpayer 

Non-tax criminal case: 26 USC 6301(i)(2)(A), <B) - 
federal employees personally and dir^y engaged in the 
(voceeding can have access to return information {other 
than taxpayer return information) upon written r«{ucst 
from head of agency 


I 


Tax Records - Return Info 
Other Than Taxpayer Return 


Intelligence case; 26 USC 6103{i){3)fC) provided that we 
could get (and did firom the IRS (including the IRS rep 
on JTTTF) return information (other than taxpayer return 
information) “that may be relate to a terrorist incident 
threat or activity*' - IRS nnr needed permission to disclose 
from an IRS disclosure offtcer, once permission received, 
information was disseminated to FBI. and IRS disclosure 
ofRoer formally notified Director of the FBI of the 
dUclosuie 

However, that provision expired December 3 1 , 2003 and 
has not been renewed 


Tax Records - Return Info 
Other Than Taxpayer Return 


Never used fJTOvision- 26 6!D30)(?)(^ prbvidad fiir foona) 

writteonxpxstbyFB] UrecUrortnsdcd^todwIftSfvdwdasuie^; 
of return ndicKinBUan (olfaw then IsxpsyOT retam ioftariimion) to an 
employee pcnortdly and direedy engHjed b the napoose to or/ 

. utv«st9«tbA ^any unttist 

Neywtt$edprtwisk»^26USC6t03(i)(7)Q9)--p ' 

wtitta) by Ae head of aii btwigcnce « 

' ig en ea aggify pefMnnri ahd Qwerty biyiged 

wthgcoaccUOo waitalyiaicftntdligcoceaadcq uiae rliite l ligarioc * 

. infbnnatum tier isrvMttgMioa eoooeiiing Biy icnensi ioci^^ 
oractivi^. . 

^ tbcBoirovtsKXB (raeaemimd; ciV’'redbeGeislMr 3!f ^3Kadj;^^ 
have. «KX been renewed'^, i 


Tax Records - Return Info 
Other Than Taxpayer Return 


■ Thus, m inleliiMnce cases, we cannot get return 
tnforiRntion mner dun taxpayer retorn mfbimation, 1 IOT 
we gpt taxpayer retufo mfoniutioii; unless case has 
criminal nexus ~ s 

a ^^W 26 USC 7213A, there ere niisdemcainfu criminal ■ 

' panalbea that atmrfi in uimifhnri y.Bti in<yBch<iti iw mnni T. 

nribination; • tbna, need to be careful eriwn aocqMing any 
^ type of tax nture inibnn^^ 

mvmaimreandcouit oidm'!- S': -.J' 


Tax Records - 
Use in Proceedings 


Per 26 USC 6 1 03(i)(4) q i ti t fc d ‘%Jre of ostsm dbclbscd returo and: - 
^ecure bfomiatka ut judiriri w Mbninistntrre proceediae^ - 
taxpayer tecurn tnfcmtndon aad tetuzn iofonnmen (oOaer than 
taxpayer remn hrfortHatten) canhe used ia jodidai or ad miahea tive 
pmommg pertstninji to enforcement oftmeritic fedeml criminri 
statute or rnabd civil f o r ftiliue in which gc 4dcrri iga^y a a 
party - PISA ^licatieo doca not seem to be e nconipasi ed hm 
Per ^ USC 72J 3, dto« tte fcfooy craniaal penaltiee tfm attach to 
maiidicrizMdisctostim ofretora uifiMtQttion 


Thus, h is recommended bat res 
inforrsadon. it should not be ioa 


Itess of how you received return" 
id in a FISA appheadon 


Bank Secrecy Act Records 
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Follow-Up requests to 5/17/2006 OIG Interview of FBI AGC 
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1 . Effective dates of the two attachments to ECPA National Security Letters which 
list types of information that may be considered by a recipient to be “toll billing 
records.” The attachments were marked as Exhibits 2 (shorter version) & 3 
(longer version). 

2. Effective dates of the two attachments to ECPA National Security Letters which 
list types of information that may be considered by a recipient to be an “electronic 
communication transactional record.” The attachments were marked as Exhibits 
4 (shorter version) & 5 (longer version). 

3. Your emails and OGC guidance on how to handle “over collections” from any 
typeofNSL. 




Your emails to “all CDCs” during the period from 1/1/2003 to date in response to 
questions from the field regarding NSL issues or that you initiated to address ad 
hoc questions. 


5. Hard copies of the current model ECs and NSLs (as of March 9, 2006) and the 
guidance (as of March 15, 2006) posted on the FBI/OGC’s Intranet. A printout 
from the FBI’s Intranet was marked as Exhibit 6. (This request may already be in 
process.) 

6. Documents in your hard copy or electronic files relating to the CAU/ NSL issue 
we discussed, including emails; letters sent by CAU to telephone carriers 
requesting infonnation to be followed by an NSL; documents referencing 
meetings with CAU and others concerning this issue; and the forms and 
attachments reflecting the resolution of the discussions with CAU, including the 
follow-up infonnation you referenced . 

7. The name and contact information of the Federal Reserve attorney with whom 
you communicated on the TFOS/ NSL issue we discussed. 


8. The name of the Section Chief at TFOS at the time of the TFOS / NSL issue. 

9. Emails you sent, received, or were copied on regarding the TFOS/ NSL issue. 


10. The FBI’s current request for rmy legislative changes to the NSL statutes, 

including the suggested revisions we discussed to EPCA and the “Buckley” law. 


We would be grateful if you would provide these documents to us with copies to the 
Inspection Division c/o Section Chief David Evans, Audit, Evaluation and Analysis 
Section by May 23. 2006 . 
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Counterterrorism Division Attn: 

AD, 

DAD 

Counterintelligence Division 

AD, 

DAD 

Cyber Division 

AD, 

DAD 

All Field Offices 

ADIC 


SAC 



CDC 



From: 


Office of the General Counsel 
National Security Law Branch 
Contact ; I 


Approved By: Caproni Valerie E 

Hulon Willie T 
Szady David 


Drafted By: 


Case ID #: 319X-HQ-A1487720-OGC 


Title: LEGAL ADVICE AND OPINIONS; 

FBI POLICY RE REIMBURSEMENT OF COSTS TO RECIPIENTS 

OF NATIONAL SECURITY LETTERS 

Synopsis: Provides guidance to the field as to the 

establishment within the FBI of a uniform policy with respect 
to reimbursement of costs to recipients of National Security 
Letters (NSLs) for the production of information responsive to 
NSLs. This guidance provides that where the authorizing 
statute, requires reimbursement, clearly we will continue our 
practice of paying. Where the authorizing statute does not 
reference any form of reimbursement, then the FBI will not pay 
for the information. 


Details: 

Four statutes that provide for the issuance of 
National Security Letters vary in their provision for 
reimbursement of costs to recipients of NSLs for production of 
information responsive to NSLs . The Electronic Communications 
Privacy Act (ECPA) , 18 U.S.C. § 2709, does not provide for 
reimbursement of costs; thus, there is no legal obligation to 
pay for toll billing/subscriber records or electronic 
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To: Counterterrori_ia From: Office of the b^neral Counsel 
Re: 319X-HQ-A1487720-OGC 11/22/2005 


communication transactional records to which the statute 
applies. The Right to Financial Privacy Act (RFPA) , 12 U.S.C. 
§ 3415, requires reimbursement of costs for information 
obtained from financial institutions to which NSLs are issued 
under Section 3414(a) (5) (A); Title 12, Code of Federal 
Regulations (CFR) , Part 219, and appendix, provides a 
reimbursement of costs schedule.^ The Fair Credit Reporting 
Act (FCRA) , 15 U.S.C. § 1681u, requires reimbursement of costs 
for financial institution listings and consumer identifying 
information obtained from credit reporting companies but no 
reimbursement schedule has been promulgated.* Its 
counterpart, FCRA, Section 1681v, enacted as part of the 2001 
USA Patriot Act, providing for full credit reports in 
international terrorism cases, does not authorize 
reimbursement of costs. 

Variations in Cost Policy Among FBI Field 

Offices 


The differences in the payment provisions of the NSL 
statutes have caused field offices to adopt varying policies 
as to whether they pay bills that are submitted by NSLs 
recipients. When bills are submitted by RFPA NSL recipients, 
the rules are clear. Field offices must and do pay for such 
NSLs based on the reimbursement of costs schedule set out in 
the CFR. When bills are submitted by ECPA NSL recipients, 
where reimbursement is not required, some field offices pay 
the bills as submitted, others negotiate the amount of the 


RFPA, Section 3415 provides that "a Government entity shall pay to the 
financial institution assembling or providing financial records pertaining to 
a customer and in accordance with procedures established by this chapter a fee 
for reimbursement of costs as reasonably necessary and which have been 
directly incurred in searching for, reproducing, or treinsporting books, 
papers, records, or other data required ro requested to be produced. The 
Board of Governors of the Federal Reserve System shall, by regulation, 
establish the rates and conditions under which such payment shall be made, 
under 12 C.F.R. §219.3, Appendix A, a fee schedule has been adopted, under 
which photocopying is reimbursable at $.25 per page and searching is 
reimbursable at $11 per hour for clerical staff. 

2 

FCRA, Section 1681u(e) provides that "[t]he Federal Bureau of 
Investigation shall, sxibject to the availaibility of appropriations, pay to the 
consumer reporting agency assembling or providing report or information in 
accordance with procedures established under this section a fee for 
reimbursement for such costs as are reasonably necessary and which have been 
directly incurred in searching, reproducing, or transporting books, papers, 
records, or other data required or requested to be produced under this 
section. " 
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charge, and others flatly refuse to pay. As to credit 
reporting companies responding to 1681v NSLs,^ at least one 
such company submits bills which, to date, we have paid. With 
respect to credit reporting companies responding to 1681u 
NSLs, at least two have a policy of submitting bills, which we 
pay or intend to pay. While there is no fee schedule 
established, the fees that are or will be charged by credit 
reporting companies for 1681u requests are approximately ten 
dollars, which appears reasonable.* 

The Pro bl«Mm fc o be Addreaged bv this guidance 

Having canvassed FBI field offices as to whether they 
would like to see the FBI adopt a uniform policy with respect 
to reimbursement of costs of NSL recipients, the Office of the 
General Counsel (OGC) has determined that field offices do in 
fact want a uniform policy. That is the genesis of this 
guidance. However, since this is an operational issue and not 
a legal issue, OGC has also obtained the concurrence of the 
FBI ' s Counterterrorism Division and Counterintelligence 
Division that a uniform policy is desirable. Thus, this 
guidance is intended to create a uniform policy as to 
reimbursement of costs of NSL recipients, the creation of 
which uniform policy is particularly crucial with respect to 
those statutes which do not provide for compensation, such as 
ECPA and FCRA Section 1681v. 

Rwimhii r semen t of Costs Incurred bv ECPA WSL recioientB 

The FBI hereby adopts the policy that, since it has no 
legal obligation to reimburse costs incurred by an NSL 
recipient in producing information sought by an ECPA NSL, that 
it will not pay bills that are submitted by ECPA NSL 
recipients for such information. Its position is supported by 
the fact that the ECPA specifically provides for certain 
instances in which compensation to recipients of legal process 
is available. Those emmerated provisions do not include 
Section 2709.® Further, since certain NSL statutes do contain 


^ The three major credit reporting companies are Experien, Transunion, 
and Equifax. 

'* Transunion just recently began providing redacted credit reports in 
response to Section 1681u requests, and has annoimced its intention to charge 
ten dollars for those reports but has yet to do so. Experien currently charges 
$9.20 per report. 

® Title 18, Section 2706(a) of ECPA provides for a reimbursement fee for 
obtaining "the contents of communications, records, or other information \mder 
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reimbursement provisions, it is clear that when Congress so 
intended, it did in fact enact such a provision. While there 
is not necessarily any obvious rationale to the determination 
of which NSL statutes contain reimbursement provisions, the 
fact is that Congress has had opportunities to remedy what may 



Further, to the extent that bills for reimbursement 
submitted by carriers in the past have been paid by field 
offices, they presumably have been done so on the theory that 
payment will encourage cooperation and responsiveness to an 
NSL request. Inasmuch as it is expected that before the end 
of the year, ECPA, as well as other NSL statutes, will have 
been amended to specifically provide the FBI with enforcement 
authority, there will be less of a need for the FBI to seek 
voluntairy cooperation of carriers by providing payment to 
which the carriers are not legally entitled. 

Enclosed is a model letter that field offices may want to 
use in response to requests for payment. These letters may 
assume particular importance when addressed to carriers who to 
date have received reimbursement and suddenly find themselves 
cut off from reimbursement under the new FBI policy. 



section 2702, 2703, or 2704," except the provision does not apply, per section 
2706(c) "with respect to records or other information maintained by a 
conununications common carrier that relate to telephone toll records and 
telephone listings obtained under section 2703 of this title. The court may, 
however, order a payment as described in subsection (a) if the court 
determines the information required is unusually voluminous in nature or 
otherwise caused an undue burden on the provider," 
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Therefore, it is now FBI policy not to reimburse the costs of 
recipients of FCRA Section 1681v NSLs. 

Po-iTnhii rsement of Costs Incurred by FCRA Section 1681n N8L 
Recipients 


While FCRA Section 1681u provides for compensation for 
NSLs, there has yet to be promulgated a schedule of such fees. 
It is FBI policy that as a general matter the fee schedule 
adopted for RFPA NS Ls should be the basis of compensation for 


Section 1681u NSLs 


It may prove mo re 


sensib le to allow for flexibility in how 

offices handles any such bills, with a recommendation 
that they coordinate with one another so that the compensation 
is uniform. 


Conclnsion 


OGC recognizes that field offices are likely to need 
further guidance when faced with particular scenarios . There 
may be situations in which lack of compensation is unduly harsh 
in light of the burden placed on the carrier by the NSL 
request. Such situations may be addressed on a case-by-case 
basis.® 

To the extent that there are repercussions with respect to 
the compliance with NSLs, we do now have in place an 
enforcement mechanism for NSLs via the recently enacted USA 
PATRIOT Act Improvement and Reimbursement Act of 2005. That 
statutory authority should serve to ameliorate the possible 
adverse consequences that might ensue at the onset of this new 
policy. 

Any questions about the issues set forth above sh ould be 
addressed to field office Chief Division Counsel or to 
in the National Security Law Branch. 


This flexibility is conceptually analogous to the provision of ECPA, 
Section 2706, which authorizes court -ordered compensation when a criminal 
legal process seeking telephone records is especially burdensome. See 
footnote 5 . 
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Counterterroridti From: Office of the General Counsel 
319X-HQ-A1487720-OGC 11/22/2005 


LEAD(s): 

Set Lead 1: (Adm) 

AT.T. RRCFIVING OFFICES 

Distribute to all supervisory personnel involved 
in the investigation of counterintelligence, counterterrorism, 
and cyber cases. 


1 - Ms . Caproni 
1 - Mr . Hulon 
1 - Mr. Szady 


♦♦ 
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Enclosed is an EC that has just been uploaded, 319X-HQ-A1487720-OGC, Serial 213, which permits (but obviously, does 
not require) NSLs to be served by non-secure fax under certain conditions. Here are the relevant conditions, as set forth 
in the EC: 

A supervisor must approve the non-secure fax transmission. The FBI 
employee must call and verify that the intended person is waiting at the 
fax machine for the transmission. After the faix has been completed, the 
FBI employee must immediately call and confirm that the fax has been 
received. For each such non-secure fax transmission, there must be written 
documentation reflecting the supervisor’s approval and the facts set forth 
above, including the time and date of the transmission, and the name of the 
recipient party. 

The EC does NOT authorize us to receive the information back from the recipient via non-secure fax. 

I hope this saves a bit of time in the NSL process. 



nstfiraldeiiverysefvi 
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Precedence: IMMEDIATE 

To: All Field Offices 

Counterterrorism 
Counter intel 1 igence 
Cyber 


Date: 3/20/2006 

Attn: ADIC; 

SAC; 

CDC; 

FCI/IT Supervisors 
AD Hulon; 

DADS ; 

Section Chiefs 
Acting AD Bereznay; 
DADS ; 

Section Chiefs 
AD Reigel 
DADS 

Section Chiefs 
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From: General Counsel 

National Security Law Branch, LX-1 Room 3S100 
Contact : I ^ I 


Approved By; Phalen Charles S Jr 
Caproni Valerie E 


Drafted By: 


Case ID #: 319X-HQ-A1487720-OGC 


Title: LEGAL ADVICE AND OPINIONS; 

SERVICE OF NATIONAL SECURITY LETTERS 

Synopsis: Provides revised guidance on the service of 

National Security Letters (NSLs) by facsimile, as a follow-up 
to EC dated 6/29/2005 concerning expansion of approved methods 
of delivering NSLs, Specifically, the use of a non-secure fax 
is now an acceptable method of service of an NSL by the FBI. 

Reference: 319X-HQ-A1487720-OGC, Serial 27 

Details: 

BACKGROUND: 


The FBI issues NSLs pursuant to numerous statutes, 
including the Fair Credit Reporting Act, 15 U.S.C. §§ 1681u 
eind 1681v, the Electronic Communications Privacy Act, 18 
U.S.C. § 2709, and the Right to Financial Privacy Act, 12 
U.S.C. § 3414. The NSLs are not classified. Nor is the 
information that is returned in response to an NSL {NSL return 
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Td» All Field Offices From: Security Lj.vision; 

General Counsel 

Re; 319X-HQ-A1487720-OGC 3/20/2006 


information) . However, the documents that are transmitted to 
the receiving entity and returned to the FBI do contain 
sensitive information. For that reason, the Office of the 
General Counsel (OGC) had opined in the past that NSLs should 
be personally served upon or secure faxed to the recipient and 
responsive information should be personally delivered or 
secure faxed to the FBI. However, by EC dated 6/29/2005,^ the 
Security Division and OGC issued additional guidcince which 
allowed for the delivery of NSLs via a controlled reputable 
delivery service such as Federal Express or the U.S. Postal 
Service's restricted delivery service, and allowed for the 
delivery of NSL return information by any reputable delivery 
service. The restrictions as to the requirement of secure fax 
transmissions remained in place. 

At the time of issuance of that guidance, the 
Security Division and OGC represented that they would address 
the issue of the service of NSLs to the recipient and return 
of responsive information to the FBI by fax machines through 
future guidance. 

While the secure faxing of NSLs and NSL return 
material continues to provide the most security for the 
information, OGC and the Security Division have continued to 
reexamine this issue. We recognize that the requirement of 
secure faxing of NSLs and NSL return information raises issues 
of efficiency, and sometimes potential harm to an 
investigation, as did the requirement of personal delivery. 
Therefore, we have concluded that use of non-secure fax is 
permissible by the FBI in its service of an NSL upon the 
recipient. (The same is not true of faxing of NSL return 
information. See below.) 

However, there are conditions that attach to use of 
a non-secure fax to transmit an NSL to a recipient. A 
supervisor must approve the non-secure fax transmission. The 
FBI employee must call and verify that the intended person is 
waiting at the fax machine for the transmission. After the 
fax has been completed, the FBI employee must immediately call 
and confirm that the fax has been received. For each such 
non-secure fax transmission, there must be written 
documentation reflecting the supervisor's approval and the 
facts set forth above, including the time and date of the 
transmission, and the name of the recipient party. 


319X-HQ-A14B7720-OGC, serial 27 
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General Counsel 
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The Security Division has not approved the faxing of 
NSL return information via non-secure fax because of the FBI's 
inability to hold the recipient ' s employees accountable for a 
similarly responsible process of fax transmission at their 
end. 


CONCLUSION 


This guidance provides the outer parameters of 
acceptable methods or service at the present time. 

Obviously, headquarters and field offices may choose to 
continue to use secure fax cuid personal service, as a general 
policy matter or as applied to individual situations, rather 
than controlled delivery services and non-secure fooc. As with 
any system designed to protect security, it is the 
responsibility of FBI employees, in consultation with their 
supervisors and the Security Division, to exercise their 
discretion in such a manner as to assure that the method they 
have chosen for service adequately protects the sensitivity of 
the information contained in the NSL and the return 
information. 

Any questions regarding thi s communication mav b e 
directed to Assi stant General Counsel at 
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To: All Fxeld Offi<-es From: Security Lj. vision; 

General Counsel 

Re: 319X-HQ-A1487720-OGC 3/20/2006 

LEAD(s): 

Set Lead 1: (Adm) 

ALL RECEIVING OFFICES 

Distribute to all supervisory personnel involved in 
the investigation of international terrorism, 
counterintelligence, and cyber cases. 

1 - Mr. Phalen 
1 - Ms . Caproni 
1 - Ms . Thomas 





